Hi and thanks for your answer.
We have 3 certificates. Since this only happens on one server and we have
the exact same conf and certs on all servers I don't think that's the
reason, though.
This is our conf:
###
global
log 127.0.0.1 local0 notice
maxconn 20000
user haproxy
group haproxy
tune.ssl.default-dh-param 2048
defaults
log global
mode http
option httplog
option dontlognull
option http-keep-alive
option forwardfor
retries 3
option redispatch
timeout connect 5s
timeout check 5s
timeout client 60000
timeout server 60000
stats enable
stats uri /haproxy?stats
stats auth [REDACTED]
option httpchk GET / HTTP/1.0
balance roundrobin
default-server inter 10s fall 2 rise 2
frontend http-in
bind *:80
# Define hosts
acl host_1 hdr(host) -i somehost.somedomain.com
[more host header configurations]
## switches
use_backend 1 if host_1
[more if-clauses]
frontend https-in
bind *:443 ssl crt [REDACTED] crt [REDACTED] crt [REDACTED]
# Define hosts
acl host_1 hdr(host) -i somehost.somedomain.com
[more host header configurations]
## switches
use_backend 1 if host_1
[more if-clauses]
backend 1
server node1 [some IP] check
server node2 [some IP] check
[more backends]
###
Will try with strace and see what we see.
----------------------------
Joel W Kall