On 28 September 2017 at 06:32, mabi <m...@protonmail.ch> wrote: > Thanks for the pointer regarding SNI not being supported in relayd. I will go > on and find another solution, probably HAproxy.
For a small number of domains it would probably be feasible to get a single certificate with multiple SANs. Letsencrypt at least supports this as long as all of the domains map (or can be made to map) to the place requesting the certificate. -- Darren Tucker (dtucker at zip.com.au) GPG key 11EAA6FA / A86E 3E07 5B19 5880 E860 37F4 9357 ECEF 11EA A6FA (new) Good judgement comes with experience. Unfortunately, the experience usually comes from bad judgement.