I loce HAProxy, it is really great and powerful and it just does the job.

Looks like we got everything working apart from some SSL setup issues.
Our SSL related setup looks like this:

frontend https-in
  bind :443 ssl crt /var/proxy/certs/fallback.pem crt
/var/proxy/certs/domain1.pem crt /var/proxy/certs/domain2.pem ca-file
/var/proxy/certs/RapidSSL_Intermediate_CA.pem
  use_backend ssl_backend

In the first 3 PEM files (fallback, domain1, domain2) we have the certs
from RapidSSL together with their private keys and in the 4th PEM file
there is the intermetiate CA certificate included.

This is working on most client platform but some customers reported
errors in their browers, mainly from Windows OS but not only from IE but
also from FF or Chrome.

The error include:
- "can't confirm that your connection is secur".
- "domain2 uses an invalid security certificate."
- "The certificate is not trusted because no issuer chain was provided."
- "(Error code: sec_error_unknown_issuer)"

What am I doing wrong, any help is mmuch appreciated.


Thanks
Jürgen

Reply via email to