Certificate selection

When AT-TLS supports a server, the certificate designated as the default for the key ring is used. Use the CertificateLabel parameter to explicitly identify a different certificate that you want to use.

If the SSL server needs to support multiple host names and multiple certificates, you can use the Server Name Indication function. The Server Name Indication function enables you to define pairs of certificate labels and host names. Use the HandshakeServerCertLabel parameter to specify these pairs.

The SSL client must support the Server Name Indication function as well. The SSL client includes a host name during the SSL handshake, which allows the matching certificate to be used.

When AT-TLS supports a client, you can use the HandshakeServerName parameter to specify the host name to be included in the SSL handshake.

For more information on configuring the HandshakeServerNameInd function, see TLS function negotiation.