If i put my client-key in client.pem then i get this error: unable to load
ssl certificate from PEM file

Is i also put the server certificate in client.pem i get this
error: inconsistencies between private key and certificate loaded from PEM
file

When i use my java client i only need the server certificate and my private
key.



On Mon, Dec 14, 2015 at 12:55 PM Lukas Tribus <[email protected]> wrote:

> > Hi
> >
> > I am trying to set up haproxy with tcp mode for passing through ssl
> > connection. But i want to check my backend health with http call.
> > My backend requiers the use of a client key.
> >
> > I tried something like this:
> > option httpchk GET /status HTTP/1.0\r\nHost:\ localhost
> > server backend1 backend1:8900 check ssl verify none crt
> > /etc/haproxy/client-key.pem
>
> Don't use:
> check ssl
>
> it will enable SSL for all the traffic, not only for health checks.
>
> You wan't:
> check-ssl
>
> which enables SSL only for the health checks
> (since your passing through TCP without intercepting
> SSL).
>
>
>
>
> Regards,
>
> Lukas
>
>

-- 
Idar Borlaug

Reply via email to