Hi,

You should use the crt-list option in your bind line, and use a file listing 
your certificates (one per line)

Example :
bind *:443 ssl crt-list /etc/haproxy/certificates

Regards,

Nicolas.

> Hi we use here a generator for haproxy configs and this one generates amongst 
> all https frontend using SNI to redirect to endspoints.
> Basically, we host lot of VMS and the host is NATing/redirecting every served 
> domain to the underlying VM and when we use https.
> In other words, it terminates SSL on the haproxy front and we are using a 
> certicate per VM.
> Technically, this was as simple as adding a crt <crt> for each vm...
> This setup worked fine and without a glitch for a time, but it's falling on 
> one host as the generated bind lineĀ  seems to be too long:

Reply via email to