Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread William Lallemand
On Tue, Nov 17, 2020 at 09:18:43AM -0300, Joao Morais wrote: > > > > Em 17 de nov de 2020, à(s) 05:28, William Lallemand > > escreveu: > > > > You could also do > > > > /tmp/default.pem !* > > > > That will ignore the creation of the SNI entries. > > Wow thank you so much Willian, as fa

Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread Joao Morais
> Em 17 de nov de 2020, à(s) 05:28, William Lallemand > escreveu: > > You could also do > > /tmp/default.pem !* > > That will ignore the creation of the SNI entries. Wow thank you so much Willian, as far as I can tell and based on ~5min tests, this worked like a charm without any back

Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread William Lallemand
On Tue, Nov 17, 2020 at 09:09:38AM +0100, William Lallemand wrote: > On Mon, Nov 16, 2020 at 08:44:58PM -0300, Joao Morais wrote: > > > > Hello list, I have a `crt-list` keyword configuring a list of > > crt/keys, something like this: > > > > /tmp/default.pem > > /tmp/a.pema.local

Re: Use default/first crt only if all snifilter fails

2020-11-17 Thread William Lallemand
On Mon, Nov 16, 2020 at 08:44:58PM -0300, Joao Morais wrote: > > Hello list, I have a `crt-list` keyword configuring a list of > crt/keys, something like this: > > /tmp/default.pem > /tmp/a.pema.local > /tmp/b.pemb.local > > We consider the first line the fallback cer

Use default/first crt only if all snifilter fails

2020-11-16 Thread Joao Morais
Hello list, I have a `crt-list` keyword configuring a list of crt/keys, something like this: /tmp/default.pem /tmp/a.pema.local /tmp/b.pemb.local We consider the first line the fallback certificate - that one that should be used if everything else fails. We've how