Hallvard B Furuseth wrote:
Would it be hard to make different listener addresses present different server certificates, signed by different CA certificates?
Not that hard. The worst part would be defining the new config syntax for it and adding the appropriate config actions.