Re: relayd, ipv6, and tls keypair names

2021-02-27 Thread jrmu
Adding two relay blocks does seem to fix the problem, thank you. jrmu On Sat, Feb 27, 2021 at 02:50:11AM -0700, Anthony J. Bentley wrote: > Hi, > > j...@ircnow.org writes: > > Then it seems relayd also works. So I suspect relayd is ignoring > > the tls keypair directive for IPv6 addresses. In

Re: relayd, ipv6, and tls keypair names

2021-02-27 Thread Christoph R. Winter
Hello ! I configured relayd months ago and did not have my config here. The keypair option works as it should (name.tld) and requires no symlinks (tested with public IPs) but the paths to the certs are hardcoded as described in the acme config file in /etc/examples. IIRC the path must be

Re: relayd, ipv6, and tls keypair names

2021-02-27 Thread Anthony J. Bentley
Hi, j...@ircnow.org writes: > Then it seems relayd also works. So I suspect relayd is ignoring > the tls keypair directive for IPv6 addresses. In other words, when IPv6 is en > abled, > relayd appears to ignore: > > tls { keypair example.com } > > Can someone verify if this is correct behavior,

relayd, ipv6, and tls keypair names

2021-02-27 Thread jrmu
I was trying to configure relayd for TLS acceleration when I noticed an unusual error. Here is my /etc/relayd.conf (with actual IPs and domains replaced): ip4="192.0.2.1" ip6="2001:db8::" table { 127.0.0.1 } table { 127.0.0.1 } log connection http protocol https { match request

Re: relayd, ipv6, and tls keypair names

2021-02-27 Thread jrmu
PS: I am running OpenBSD 6.8 stable on amd64. On Sat, Feb 27, 2021 at 03:48:04PM +0800, j...@ircnow.org wrote: > I was trying to configure relayd for TLS acceleration when I noticed an > unusual > error. > > Here is my /etc/relayd.conf (with actual IPs and domains replaced): > >