October 26, 2026 at 10:31 PM, "William Lallemand" <[email protected] mailto:[email protected]?to=%22William%20Lallemand%22%20%3Cwlallemand%40haproxy.com%3E > wrote:
> > On Mon, Oct 26, 2026 at 02:49:36PM +0000, [email protected] wrote: > > > > > Subject: status of TLS-ALPN-01 > > Hello, > > > > I am wondering about the state of TLS-ALPN-01 challenge / cert renewal in > > HAProxy. > > Few months from now I might have to replace my front Caddy server with > > HAproxy, but I need full TLS cert automation with TLS-ALPN-01. > > I know there is some work around that but I don’t have any other info. > > > Hello, > > We don't implement TLS-ALPN-01 for now, but that's something that I want to > have on the long term. Next step for our ACME implementation is to simplify > the > certificate dump on the filesystem. > > We could probably implement TLS-ALPN-01, but we need to figure out how it > could > integrate in HAProxy workflow and configuration. It's not easy because it > needs > to generate a certificate and select it if the alpn was set to "acme-tls/1". > > But that's doable in a nearby future, don't hesitate to open a ticket to > github > about it, I know that it was asked in the past as well but it wasn't a > priority > at the time. > Thank you very much. I’ll go on GitHub to open the appropriate ticket :) Have a great day. patpro
