SNI with multiple SSL certs (3 replies)

Hi Guys

Trying implement SNI with HAProxy 1.6 version.

How I want is:
1. Load all the certs to a directory as pem format (one site cert chain in
one file). So there are multiple files (may be 20-30 pem files in the
folder)

2. Configure HAProxy to dynamically load the appropriate ssl cert based on
the SNI header.

Below is my front end. Any idea?

frontend sni-https
bind 0.0.0.0:443 ssl crt /etc/haproxy/ssl/

mode http
tcp-request inspect-delay 5s
tcp-request content accept if { req_ssl_hello_type 1 }
use_backend sni_web_server if { req_ssl_sni -m found }
default_backend no_sni

Thanks

Roshan

​

--
This communication contains information which is confidential and the
copyright of Whispir or a third party. If you have received this email in
error please notify us by return email or telephone Whispir on +613 8630
9900 and delete the document and delete all copies immediately. If you are
the intended recipient of this communication you should not copy, disclose
or distribute this communication without the authority of Whispir. Any
views expressed in this Communication are those of the individual sender,
except where the sender specifically states them to be the views of
Whispir. Except as required at law, Whispir does not represent, warrant
and/or guarantee that the integrity of this communication has been
maintained nor that the communication is free of errors,virus, interception
or interference.