> On 19 May 2021, at 4:26 pm, post...@ptld.com wrote: > > How do i put the "correct certificate" (what is the correct cert?) on > submission.example.com when the client is connecting to and expecting a > certificate from haproxy.example.com ?
Don't misconfigure the client to connect to "haproxy.example.com", instead publish a CNAME: submission.example.com. IN CNAME haproxy.example.com. Have the client connect to submission.example.com. The load balancing in "haproxy" can be by IP address, or some alternative names of the hosts, if haproxy wants to connect to hostnames. -- Viktor.