#908413 haproxy: HAProxy can't load more than one multicert bundle.

Package:
haproxy
Source:
haproxy
Description:
fast and reliable load balancing reverse proxy
Submitter:
"Francisco Blas Izquierdo Riera (klondike)"
Date:
2021-08-23 08:03:02 UTC
Severity:
normal
#908413#5
Date:
2018-09-09 16:32:37 UTC
From:
To:
Dear maintainer,

I have found that haproxy (both stable and backported) is unable to load correctly multiple certificate bundles using multicert setups.
The application reports errors loading the certificate chain but I could pinpoint the issue to the way in which dhparams are loaded.
Sadly, this is the only way to provide both an ECDSA and RSA key to connecting users on systems like Debian Stretch where openssl-1.1.1 isn't available.
I have wrotten, compiled and tested the attached patch. I would be very thankful if it could be included on your next backports build.
I have also submitted the patch to upstream for consideration.

I am using Debian 9.0 and the haproxy package from the stretch-backports.

Yours truly,
Francisco Izquierdo (klondike)
#908413#10
Date:
2018-09-09 16:41:12 UTC
From:
To:
 ❦  9 septembre 2018 18:32 +0200, "Francisco Blas Izquierdo Riera (klondike)" <klondike@klondike.es>:

Let's see what upstream is thinking of it and how long until 1.8.14 is released.
#908413#15
Date:
2021-08-23 08:00:29 UTC
From:
To: