RE: Issue managing multiple SSL certs

2013-01-16 Thread Lukas Tribus

 I have the same issues on windows XP clients (IE8).
 I don't have any issues at all with Win 7/IE9 and win2012/IE10.

FYI:

There are 2 browser using the Windows XP SSL/TLS stack, and thus don't provide 
SNI on Windows XP:
- Internet Explorer
- Safari
( and obsolete Chrome releases prior v 6.0)

Other Browsers, like Firefox, Chrome and Opera bring their own ssl stack with 
SNI support,
so their are not affected by the outdated SSL stack of Windows XP and can use 
SNI on XP.



Lukas 


RE: Issue managing multiple SSL certs

2013-01-16 Thread Lukas Tribus

 As a solution to this I'll try to get additional IPs and configure
 HAproxy to serve different certificates for different IPs.
 
 Do you foresee any reasons why such an approach won't work?

Don't worry, mapping the certificates to dedicated IPs will fix this
problem on IE/Safari with Windows XP.