Hi,

Simply points your crt directive to a directory and HAProxy will
launch automatically all the certificates it will find.
Then, the client must send the SNI in order to make HAProxy able to
deliver the certificate.
SNI is like virtual hosting, but for SSL protocol.

Some information about SNI (but the article describes how to USE SNI
to route traffic):
http://blog.exceliance.fr/2012/04/13/enhanced-ssl-load-balancing-with-server-name-indication-sni-tls-extension/

Baptiste

On Mon, Apr 29, 2013 at 2:36 PM, Smain Kahlouch <[email protected]> wrote:
> Hello,
>
> I wanted to know if it's possible to use different certificates according to
> the fqdn requested (header 'Host').
> I've currently only one certificate handled :
>
>
> frontend ssl_web
>   bind 0.0.0.0:443 ssl crt /etc/haproxy/haproxy.pem
>
>
> Is there another way to manage multiple certificates.
>
>
> Thanks,
>
> Smana

Reply via email to