Re: Re: Does HAproxy support sending ServerName TLS extension to backend servers?

2015-03-27 Thread Remi Gacogne
On 03/26/2015 08:34 AM, Baptiste wrote: > HAProxy does not support SNI on backend yet. > The biggest problem is not to send the SNI, the problem is what to send :) > Do you send the Host header sent by the client, do you want to forge > one, what happens if you do rewritting of the Host header, et

Re: Does HAproxy support sending ServerName TLS extension to backend servers?

2015-03-27 Thread Brandon
Jarno, Thank you your suggestion for setting the default ADFS certificate worked! On Thu, Mar 26, 2015 at 12:44 AM, Jarno Huuskonen wrote: > Hi, > > On Wed, Mar 25, Shawn Heisey wrote: > > On 3/25/2015 10:16 AM, Brandon wrote: > > > Hi, I am trying to deploy HAProxy in HTTP mode in front of a W

Re: Does HAproxy support sending ServerName TLS extension to backend servers?

2015-03-26 Thread Baptiste
On Thu, Mar 26, 2015 at 7:44 AM, Jarno Huuskonen wrote: > Hi, > > On Wed, Mar 25, Shawn Heisey wrote: >> On 3/25/2015 10:16 AM, Brandon wrote: >> > Hi, I am trying to deploy HAProxy in HTTP mode in front of a Windows >> > Server 2012 R2 ADFS 3.0 farm. In ADFS 3.0 backend servers require that >> >

Re: Does HAproxy support sending ServerName TLS extension to backend servers?

2015-03-25 Thread Jarno Huuskonen
Hi, On Wed, Mar 25, Shawn Heisey wrote: > On 3/25/2015 10:16 AM, Brandon wrote: > > Hi, I am trying to deploy HAProxy in HTTP mode in front of a Windows > > Server 2012 R2 ADFS 3.0 farm. In ADFS 3.0 backend servers require that > > clients support SNI. > > > > In my testing it does not appear th

Re: Does HAproxy support sending ServerName TLS extension to backend servers?

2015-03-25 Thread Shawn Heisey
On 3/25/2015 10:16 AM, Brandon wrote: > Hi, I am trying to deploy HAProxy in HTTP mode in front of a Windows > Server 2012 R2 ADFS 3.0 farm. In ADFS 3.0 backend servers require that > clients support SNI. > > In my testing it does not appear that HAProxy is sending the ServerName > extension in t

Does HAproxy support sending ServerName TLS extension to backend servers?

2015-03-25 Thread Brandon
Hi, I am trying to deploy HAProxy in HTTP mode in front of a Windows Server 2012 R2 ADFS 3.0 farm. In ADFS 3.0 backend servers require that clients support SNI. In my testing it does not appear that HAProxy is sending the ServerName extension in the TLS handshake and as a result I am receiving a "