See https://github.com/jhermann/devpi-enterprisey#ssl-certificate-handling for the current state of the devpi / packaging universe in one place. All that stuff is tested, including SNI with Python2, going through an Apache2 named SSL vhost on one machine to another running devpi-server behind NginX. Yes, migration scenarios are strange. ☺