Hello Marco,

Am 26.09.2017 um 20:42 schrieb Pushpad Support:
> Could you help with this question? 
> https://serverfault.com/questions/875572/use-ev-ssl-certificate-in-haproxy-for-root-domain
>
> I think it is a pretty general use case.

You should be able to achieve this using crt-list:
https://cbonte.github.io/haproxy-dconv/1.7/configuration.html#5.1-crt-list

I assume this would have to look like this (untested):
haproxy.cfg (default ev cert and the reference to the crt-list):
bind ... crt /etc/haproxy/ev-certificate.crt crt-list /etc/haproxy/crtlist

crtlist (assigning the wildcard certificate to all subdomains except www. and 
root):
/etc/haproxy/wildcard.crt *.example.com !www.example.com !example.com


cheers,
lukas


Reply via email to