Quantcast
Viewing all articles
Browse latest Browse all 168455

Re: Load balancing with HAProxy and CA signed certificates

This is my current config file

 

frontend LBVIP

  mode tcp

  bind LoadBalancerVIPHostname:443 ssl crt /etc/haproxy/haproxy.pem crt /etc/haproxy/certs/ ca-file /etc/haproxy/cafile.pem

  use_backend Security01 if { ssl_fc_sni SecurityServer01HostName }

  use_backend Security02 if { ssl_fc_sni SecurityServer02HostName }

 

backend Security01

  balance source

  mode tcp

  server secsrv1 HOSTNAMEofSECSRV1

 

backend Security02

  balance source

  mode tcp

  server secsrv2 HOSTNAMEofSECSRV2

 

/etc/haproxy/haproxy.pem is the certificate of the Load Balancer's VIP.

/etc/haproxy/certs/ is the location of the security server certificates in .pem format with keys.

/etc/haproxy/cafile.pem is the Root and Intermediate CAs in my infrastructure.

 

When I use a program to check the certificate and chain it resolves just fine.  View seems to be failing me miserably though.  Notice anything in particular wrong with it?


Viewing all articles
Browse latest Browse all 168455

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>