1.4 does not support SSL. SSL was added in 1.5-dev12

-Patrick


------------------------------------------------------------------------
*From: *Juan Jimenez <jjime...@electric-cloud.com>
*Sent: * 2014-03-30 02:44:42 E
*To: *haproxy@formilux.org <haproxy@formilux.org>
*Subject: *No ssl or crt in bind when compiled with USE_OPENSSL=1

> I am trying to figure out why haproxy 1.4.25 does not like crt and ssl in
> bindŠ
>
> I recompiled with:
>
>       make TARGET=linux2628 USE_OPENSSL=1
>       make install
>
> The cfg file looks like this:
>
> global 
>         log 127.0.0.1   local0
>         log 127.0.0.1   local1 notice
>         #log loghost    local0 info
>         maxconn 4096
>         #chroot /usr/share/haproxy
>         user skytap
>         group skytap
>         daemon
>         #debug
>         #quiet
>
> defaults
>         log     global
>         option  dontlognull
>         retries 3
>         option redispatch
>         maxconn 2000
>         contimeout      5000
>         clitimeout      50000
>         srvtimeout      50000
>
> listen stats *:1936
>        mode http
>        stats enable
>        stats realm Haproxy\ Statistics
>        stats uri /
>        stats refresh 30
>        stats show-legends
>
> frontend commander-server-frontend-insecure
>          mode http
>          bind 0.0.0.0:8000
>          default_backend commander-server-backend
>
> frontend commander-stomp-frontend
>          mode tcp
>          bind 0.0.0.0:61613 ssl crt /home/skytap/server.pem
>          default_backend commander-stomp-backend
>          option tcplog
>          log global
>
> frontend commander-server-frontend-secure
>          mode tcp
>          bind 0.0.0.0:8443 ssl crt /home/skytap/server.pem
>          default_backend commander-server-backend
>
> backend commander-server-backend
>         mode http
>         server node1 10.0.0.7:8000 check
>         server node2 10.0.0.9:8000 check
>       server node3 10.0.0.10:8000 check
>         stats enable
>         option httpchk GET /commanderRequest/health
>
> backend commander-stomp-backend
>         mode tcp
>         server node1 10.0.0.7:61613 check
>         server node2 10.0.0.9:61613 check
>       server node3 10.0.0.10:61613 check
>         option tcplog
>         log global
>
> ‹‹‹‹‹
>
>
> And the error messages are:
>
> [skytap@haproxy haproxy-1.4.25]$ haproxy -c -f /etc/haproxy/haproxy.cfg
> [ALERT] 087/233343 (3964) : parsing [/etc/haproxy/haproxy.cfg:38] : 'bind'
> only supports the 'transparent', 'defer-accept', 'name', 'id', 'mss' and
> 'interface' options.
> [ALERT] 087/233343 (3964) : parsing [/etc/haproxy/haproxy.cfg:45] : 'bind'
> only supports the 'transparent', 'defer-accept', 'name', 'id', 'mss' and
> 'interface' options.
> [ALERT] 087/233343 (3964) : Error(s) found in configuration file :
> /etc/haproxy/haproxy.cfg
> [ALERT] 087/233343 (3964) : Fatal errors found in configuration.
>
> ‹‹
>
> ??
>
>
> Juan Jiménez
> Electric Cloud, Inc.
> Sr. Solutions Engineer - US Northeast Region
> Mobile +1.787.464.5062 | Fax +1.617-766-6980
> jjime...@electric-cloud.com
> www.electric-cloud.com <http://www.electric-cloud.com/>
>
>

Reply via email to