Chain certificate order problem (intermediate certificate sent twice)

wgold

Hi,
Using HA-Proxy in pfSense 2.6 CE, I followed some of the recommendations herein to add the chain certificate to the server cert text field:
Certificate data:
-----BEGIN CERTIFICATE-----
MIIMEzCCCv...
(Server Cert)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MI...
(Chain cert)
-----END CERTIFICATE-----

Now the chain certificate gets sent twice.
$ openssl s_client -connect zentrada.com:443 -showcerts

This causes issues with some very strict clients out in the net. SSLLabs tells:
Additional Certificates (if supplied)
Certificates provided 3 (5783 bytes)
Chain issues Incorrect order, Extra certs

Any advise, how I can stop the proxy from sending the intermediate cert twice?

Thanks

wgold

I solve it. (Somehow)
After switching back and forth the cert selection in the frontend, the proxy configuration in /var/etc/haproxy has been regenerated.
This time correctly with only two certificates.