Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a HAProxy + stunnel setup, I would like to have different certificates for my domain and submdomain. Certificate 1 - Certificate 2 - How do I configure Stunnel to do this? It works fine with just one certificate but I have trouble setting it up for multiple certificates. Thanks!

share|improve this question
You run multiple instances of stunnel. AFAIK it doesn't do multiple certs. – Zoredache Apr 9 '14 at 5:25
up vote 5 down vote accepted

With one IP address, you need to use the TLS SNI extension. There's an example config here:

Server-side SNI requires stunnel version 4.38 or newer compiled with OpenSSL 1.0.0 or newer.

Also, client support:

  • IE7+
  • Chrome 6+
  • Firefox 2+
  • Opera 8+
  • Safari 3+
  • iOS4+

Also note that Windows XP does not support the SNI extension.

share|improve this answer
bennettp123, welcome to SF. That's a cracking, textbook first answer - +1 from me. – MadHatter Apr 14 '14 at 10:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.