Single domain with RSA and ECDSA certs

I’m having a difficult time to setup TLS termination on HAProxy,

I have HAProxy 2.6.7, I have 2 certificates for RSA and ECDSA, it is set up ad described in the docs:

bind 10.0.0.3:443 ssl crt /etc/ssl/certs/mycert.pem

ECDSA flow works:
openssl s_client -connect localhost:8883 -cipher ECDSA -CAfile ecdsa.crt -tls1_2

RSA does not
openssl s_client -connect localhost:8883 -cipher RSA -CAfile rsa.crt -tls1_2

haproxy_1   | fd[0xe] OpenSSL error[0x1417a0c1] tls_post_process_client_hello: no shared cipher
haproxy_1   | 172.18.0.1:60336 [20/Dec/2022:16:37:25.542] mqtt/1: SSL handshake failure

what could be a reason

3 posts - 2 participants

Read full topic