Hello, I recently added a second certificate on my HAproxy configuration. The goal : provide a wildcard cert for the corresponding requested subdomains, and a default cert for others requests.The config is functional, but regularly, the wrong cert is provided and I need to restart the haproxy servi…

Two bind statements to the same port will lead to kernel level load balancing between the two sockets, unless you put noreuseport into the configuration, at which point haproxy will refuse initialization (can’t bind to the same port twice unless SO_REUSEPORT is given, which is the default). Both ce…

@lukastribus Thanks for your answer. I opt for the one line configuration, but the strict-sni have bad effects. I will try as it and see the results. If problem, I’ll use the noreuseport global config.

Just to clarify, I didn’t suggest using one or the other; noreuseport will not fix your issue, it will make haproxy refuse to start, because it does not allow to bind multiple sockets to the same port. This was not a suggestion for a fix, but an explanation about the behavior and what you are seeing…

Problem with a 2 certificates configuration

Help!

Ric June 14, 2026, 2:44pm 5

I doensn’t understand it differently. I tested the two solutions and made a choice according to the found informations.

Topic		Replies	Views
Cannot bind socket 80 / 443 Help!	7	13061	May 23, 2018
HAProxy 1.6 with SNI and different SSL Settings per hostname Help!	1	9017	October 5, 2016
Randomly issuing the wrong certificate Help!	1	1735	July 17, 2018
Strange behavior observed with SNI Help!	1	212	August 17, 2023
Help with SSL config with 1 root cert but mutiple subdomains listening on port 443 Help!	18	1255	July 17, 2020

Problem with a 2 certificates configuration

Related topics