Hi,

# haproxy -v
HA-Proxy version 1.8.14-1ppa1~xenial 2018/09/23
Copyright 2000-2018 Willy Tarreau <wi...@haproxy.org>

I noticed that in case of multiple domains and OCSP setup:

# ls -1 /etc/haproxy/ssl.d/*.ocsp
/etc/haproxy/ssl.d/star_domain2_com.crt.ocsp
/etc/haproxy/ssl.d/star_domain_com.crt.ocsp
/etc/haproxy/ssl.d/star_domain3_com.crt.ocsp
/etc/haproxy/ssl.d/star_domain4_com.crt.ocsp

I get OCSP response from haproxy only for one of the domains
domain.com. Tested via:

$ echo | openssl s_client -connect domain[234].com:443 -tlsextdebug
-status -servername domain[234].com

Is this expected?

Reply via email to