Is it possible to have several SSL certificates (SNI)? about haproxy-acme-validation-plugin

[ibizaman]

Just checked, the syntax is without the wildcard:

frontend https
    bind *:443 ssl crt /etc/ssl/my_certs

Note that if one file of the files in that directory is not a certificate or is unparsable by haproxy for a reason, haproxy will not start.

[mkaatman]

Right or wrong, what I did was setup one cert for all my domains as aliases.

All the instructions are the same except you add multiple domains with -d when you generate the cert.

Technically you end up with one cert that is valid for as many subdomains as you want but they're aliases. The browser will accept it without issue but if someone inspects the cert they'll see it's for the first domain listed.

sudo ./letsencrypt-auto certonly --text --webroot --webroot-path
/var/lib/haproxy -d example.com -d www.example.com -d example2.com -d www.example2.com --renew-by-default --agree-tos
--email [email protected]

[ibizaman]

I don't have access to my box where I configured this, but if I recall correctly you can simply do:

frontend https
    bind *:443 ssl crt /etc/letsencrypt/live/*

Note that haproxy will not go inside subdirectories.