2 ms·
I see. Re: SNI I meant the ACME challenge mode to issue the LE cert: given that it only listens on :443 i assumed it must use the tls-sni based challenge, rath
by stephenr 9y ago
I see.
Re: SNI I meant the ACME challenge mode to issue the LE cert: given that it only listens on :443 i assumed it must use the tls-sni based challenge, rather than the http based challenge?
- weddpros 9y agoBy proxy, do you mean https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt ? this looks very new... (I thought you were talking about X-Forwarded-For) Yes, it's using the TLS-SNI challenge (through golang's autocert)
- stephenr 9y agoYes that's what I meant by PROXY protocol support. Introduced 7 years ago is "very new"?
- weddpros 9y agoI must have read a bit too fast... I'd never heard of it actually, I just knew about X-Forwarded-For for HTTP but I didn't know of a TCP compatible protocol. I've read the RFC, it's easy enough to implement the v1, I'll do it... If you're willing to test it with me, please email me chris [à] chris-hartwig.com
- weddpros 9y agodone... https://tlsproxy.com/new-proxy-support/ https://tlsproxy.com/new-proxy-support/ Please tell me how it works for you if you try it!