How enable https ip ssl access

[huang-x-h]

Now, we delopy apisix and access http://ip:9080, then enable ssl and access https://ip:9443

So how to enable https, when just access by ip not by domain.

Now, we use a nginx server to set ssl and proxy apisix to fix this 😭

[Lewisyixin]

how ip works with ssl.... shouldn't ssl just used for domain?

[tokers]

Show us your APISIX configuration, especially for the listening settings. Just talking is useless.

[huang-x-h]

Show us your APISIX configuration, especially for the listening settings. Just talking is useless.

First, we upload ip SSL Certificate

Second, change config.yaml add custom ssl options

apisix:
  node_listen: 9080
ssl:
  listen_port: 9443
  fallback_sni: "10.7.1.16"

Now, we access https://10.7.1.15:9443/

if fallback_sni not set, we access the site will show

[tokers]

That's a normal case; if I remember correctly, the browser won't take the SNI to APISIX if you don't use the domain to access it. Even if the browser does, the SNI and the IP address don't match. How did APISIX know which certificate it should return to you?

[huang-x-h]

Yes, so we add fallback_sni

"How did APISIX know which certificate it should return to you?" maybe it's here, https://github.com/apache/apisix/blob/master/apisix/ssl.lua#L39-L55

[tokers]

You said "if fallback_sni not set, we access the site will show xxx". What's your problem? It's expected.