Hi Jürgen,

> frontend https-in
> bind :443 ssl crt /var/proxy/certs/fallback.pem crt
> /var/proxy/certs/domain1.pem crt /var/proxy/certs/domain2.pem ca-file
> /var/proxy/certs/RapidSSL_Intermediate_CA.pem
> use_backend ssl_backend

The intermediate must not be a "ca-file", but a "crt". The ca-file
is used when you do client certificate validation.



> This is working on most client platform but some customers reported
> errors in their browers, mainly from Windows OS but not only from IE but
> also from FF or Chrome.

I can only recommend to run this trough the following test:
https://www.ssllabs.com/ssltest/

It pinpoints any issues with your SSL configuration, including chaining
issues (should say "Chain issues: None").


Lukas                                     

Reply via email to