Awesome, glad it's all settled! On Tue, Jun 2, 2015 at 3:31 PM, Shawn Heisey <hapr...@elyograg.org> wrote: > On 6/2/2015 1:29 PM, Andrew Hayworth wrote: >> On Tue, Jun 2, 2015 at 2:16 PM, Shawn Heisey <hapr...@elyograg.org> wrote: >>> My script may update a dozen ocsp responses all used by a single haproxy >>> process ... so when I am using the stats socket to set the ocsp >>> response, how do I tell haproxy which of the certificates it is using >>> needs that response? Do I need to diffeentiate them, or simply send all >>> the ocsp responses in via the stats socket? >> >> No, you do not need to differentiate them. HAProxy will parse needed >> information out of the base64-encoded response. > > Thanks for the extremely helpful pointer! Now I have an updated script > that makes everything work right, by sending every updated OCSP response > to the haproxy stats socket. > > https://gist.github.com/elyograg/4b4703c3b7503c1f259e > > Thanks, > Shawn > >
-- - Andrew Hayworth
