HAProxy unable to load SSL certificate from PEM file

preview_player
Показать описание
HAProxy unable to load SSL certificate from PEM file
1
Generate a unique private key KEY

Note:
Content in this file start with -----BEGIN RSA PRIVATE KEY-----

2
Generating a Certificate Signing Request CSR

Note:
Content in this file start with -----BEGIN CERTIFICATE REQUEST-----

3
Creating a Self-Signed Certificate CRT

Note:
Content in this file start with -----BEGIN CERTIFICATE-----

4

Note:
This pem file contains 2 sections certificates, one start with -----BEGIN RSA PRIVATE KEY----- and another one start with -----BEGIN CERTIFICATE-----

5
Specify PEM in haproxy config
listen haproxy
mode http
option http-server-close
option forwardfor
reqadd X-Forwarded-Proto:\ https
reqadd X-Forwarded-Port:\ 443
option forwardfor if-none
balance roundrobin
option abortonclose
server 192.168.100.224 192.168.100.224:1443 check inter 10s rise 2 fall 3 ssl verify none

6
Restart haproxy
$ sudo service haproxy restart
Рекомендации по теме