Hi,

I'm using multiple certificates for haproxy. All certificates are places in
one folder and this works great when using a webbrowser.

frontend https-in
        bind x.x.x.x:443 ssl crt ./certs/

        # Add a header at the end of the HTTP request.
        reqadd X-Forwarded-Proto:\ https

        default_backend default_servers

When I run "openssl s_client -connect subdomain.domain.tld:443" I get the
wrong certificate. The certificate which is alphabetically the latest in
the folder is returned (and incorrect).

Removing the certificate from the folder results in the certificate which
is than latest in the folder.

This behaviour is with all domains that are configured in haproxy.

HA-Proxy version 1.5.2 2014/07/12

I can not figure out why the wrong certificate is returned. Maybe someone
could help me. Maybe this is a bug in haproxy?

Thanks!

Martin van Diemen

Reply via email to