Re: Let's Encrypt ca-file for check-ssl on server line

2020-03-03 Thread Aleksandar Lazic
Hi all. Thanks for help. Regards Aleks On 02.03.20 23:25, Tim Düsterhus wrote: Aleks, Am 02.03.20 um 23:19 schrieb Aleksandar Lazic: I think I found the solution. ``` curl -vO https://letsencrypt.org/certs/isrgrootx1.pem.txt curl -vo

Re: Let's Encrypt ca-file for check-ssl on server line

2020-03-02 Thread Tim Düsterhus
Aleks, Am 02.03.20 um 23:19 schrieb Aleksandar Lazic: > I think I found the solution. > > ``` > curl -vO https://letsencrypt.org/certs/isrgrootx1.pem.txt > curl -vo https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem.txt > curl -vO

Re: Let's Encrypt ca-file for check-ssl on server line

2020-03-02 Thread Aleksandar Lazic
On 02.03.20 22:52, Aleksandar Lazic wrote: Hi Lukas. On 02.03.20 22:38, Lukas Tribus wrote: Hello Aleks, On Mon, 2 Mar 2020 at 22:21, Aleksandar Lazic wrote: check-ssl check-sni str("storage.sbg.cloud.ovh.net") For the health check it's: check-sni storage.sbg.cloud.ovh.net (not a

Re: Let's Encrypt ca-file for check-ssl on server line

2020-03-02 Thread Aleksandar Lazic
Hi Lukas. On 02.03.20 22:38, Lukas Tribus wrote: Hello Aleks, On Mon, 2 Mar 2020 at 22:21, Aleksandar Lazic wrote: check-ssl check-sni str("storage.sbg.cloud.ovh.net") For the health check it's: check-sni storage.sbg.cloud.ovh.net (not a expression as per the doc: check-sni ) and for

Re: Let's Encrypt ca-file for check-ssl on server line

2020-03-02 Thread Lukas Tribus
Hello Aleks, On Mon, 2 Mar 2020 at 22:21, Aleksandar Lazic wrote: > check-ssl check-sni str("storage.sbg.cloud.ovh.net") For the health check it's: check-sni storage.sbg.cloud.ovh.net (not a expression as per the doc: check-sni ) and for the traffic: sni str(storage.sbg.cloud.ovh.net) (as

Let's Encrypt ca-file for check-ssl on server line

2020-03-02 Thread Aleksandar Lazic
Hi. I try to use HA-Proxy version 2.1.3-1ppa1~bionic with Let's Encrypt and ssl-check. My Serverline looks like this ``` server static_stor storage.sbg.cloud.ovh.net:443 resolvers mydns check check-ssl check-sni str("storage.sbg.cloud.ovh.net") ca-file /etc/ssl/certs/ISRG_Root_X1.pem backup