Two ssl certificates for one domain?

Question

Nginx

Good afternoon!
We have a sha256 signed certificate. One of the services (which sends requests to our server) requires sha1. What are some elegant solutions to this problem?
PS We do not want to degrade the certificate. The service will not change its policy.

Answer 1

If requests that require a weaker certificate come from one IP or range, then at worst you can dodge - raise the server on two different ports and replace the port in packets from another IP using iptables, for example. This is in the event that another service requires the same domain:port, and so, if it does not require it, you can really either have a different subdomain or port, and you won’t have to pervert.