Wildcards vs concrete SNIs in crt-list

2023-12-08 Thread Lowin, Patrick
Dear community, we are using the crt-list for different mTLS configs with the same certificate. I’d like to align on some details combining wildcard and tenant-specific SNIs. >From current experiments with 2.7.10, the order of the crt-list seems not to >matter but the best-fitting SNI is chosen

Backend connection issues with FIPS

2024-06-06 Thread Lowin, Patrick
Dear HAProxy friends, we were debugging an issue in one of our staging systems on a FIPS compliant version of Ubuntu Jammy (22.04.4): https://github.com/haproxy/haproxy/issues/2588. At this point, we tried various actions without understanding the root cause like turning off non-haproxy-proces