On Mon, Oct 26, 2026 at 02:49:36PM +0000, [email protected] wrote: > Subject: status of TLS-ALPN-01 > Hello, > > I am wondering about the state of TLS-ALPN-01 challenge / cert renewal in > HAProxy. > Few months from now I might have to replace my front Caddy server with > HAproxy, but I need full TLS cert automation with TLS-ALPN-01. > I know there is some work around that but I don’t have any other info. >
Hello, We don't implement TLS-ALPN-01 for now, but that's something that I want to have on the long term. Next step for our ACME implementation is to simplify the certificate dump on the filesystem. We could probably implement TLS-ALPN-01, but we need to figure out how it could integrate in HAProxy workflow and configuration. It's not easy because it needs to generate a certificate and select it if the alpn was set to "acme-tls/1". But that's doable in a nearby future, don't hesitate to open a ticket to github about it, I know that it was asked in the past as well but it wasn't a priority at the time. Regards, -- William Lallemand
