Add 'ssl' to your server line so it uses ssl for the backend connection. 

Sent from my iPhone

> On Apr 16, 2015, at 12:12 PM, Phil Daws <[email protected]> wrote:
> 
> Hello all!
> 
> Long time no post but have lost some of my old notes and hitting an issue 
> with SSL.  In my haproxy.conf I have:
> 
> frontend frontend-zimbra-zwc-http
>        mode http
>        bind 10.1.8.73:80
>        redirect scheme https if !{ ssl_fc }
> 
> frontend frontend-zimbra-zwc-https
>        bind 10.1.8.73:443 ssl crt /etc/haproxy/certs/mydomain.pem ciphers 
> RC4:HIGH:!aNULL:!MD5
>        option tcplog
>        reqadd X-Forwarded-Proto:\ https
>        default_backend backend-zimbra-zwc
> 
> backend backend-zimbra-zwc
>        mode http
>        server zwc01 10.1.8.40:443 maxconn 1000 check-ssl verify none
>        server zwc02 10.1.8.41:443 maxconn 1000 check-ssl verify none backup
> 
> the HTTP connections are being re-directed to HTTPS as desired but when it 
> hits the backend I see:
> 
> (NGINX) The plain HTTP request was sent to HTTPS port
> 
> If I have redirected at the frontend then why is plain HTTP being sent to the 
> backend ?
> 
> Thanks, Phil
> (null)
> (null)
> 

Reply via email to