Is there any way to use SNI + specify the server name to certificate mapping?

[Nathan Neulinger]

For example, with lighttpd, I can do:

$SERVER["socket"] == ":443" {
    ssl.engine          = "enable"
    ssl.pemfile         = "/local/lighttpd-root/ssl/ssl.pem"
    ssl.ca-file         = "/local/lighttpd-root/ssl/chain.pem"
    ssl.cipher-list     = "AES256+EECDH:AES256+EDH:!aNULL:!eNULL"
    $HTTP["host"] == "ttrss.neulinger.org" {
         ssl.pemfile    = "/local/lighttpd-root/ssl/ttrss.neulinger.org.pem"
    }
}

To specifically tell it "for requests coming in with SNI of ttrss.neulinger.org, use 
this certificate instead".

Is there any way to do this equivalent with haproxy?

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       nn...@neulinger.org
Neulinger Consulting                   (573) 612-1412