> If Haproxy doesn't terminate the encryption there is nothing you can do in > any case. > If it does, you can listen for the unencrypted traffic going between haproxy > and the > backend using tcpdump with appropriate filtering as well.
Also, if you for whatever reason need to decrypt the traffic: you do have the
private key. So you just disable any PFS ciphers and decrypt the traffic in
wireshark
with your private key.
Lukas
