On Fri, Mar 22, 2013 at 6:43 AM, Eswaramoorthy R wrote:
> so can we recypher the traffic to tomcat servers using haproxy..?
>
> any of the following solutions is ok..
>
> 1)Haproxy with HTTPS and other two servers with normal HTTP
> 2)Haproxy with HTTPS and other two servers also with HTTPS.
>
>
so can we recypher the traffic to tomcat servers using haproxy..?
any of the following solutions is ok..
1)Haproxy with HTTPS and other two servers with normal HTTP
2)Haproxy with HTTPS and other two servers also with HTTPS.
But which of the above solution works ..?
I don have any previous exp
no, as per our explanation and your request, there is a single cert in
HAProxy.
Unless you want to recypher traffic to your tomcat servers.
Baptiste
On Fri, Mar 22, 2013 at 5:51 AM, Eswaramoorthy R wrote:
> Thanks all so much for your help and also for updating the article:-)
>
> I have a doubt
Thanks all so much for your help and also for updating the article:-)
I have a doubt...As per your explanation there are totally 3 certificates
placed..They are
1)haproxy.pem
2)cert1
3)cert2
Can you please say to which server each certificate belongs to..? Below is
my sample architectur
On Thu, Mar 21, 2013 at 08:02:03PM +0100, Baptiste wrote:
> > I actually started with
> > http://blog.exceliance.fr/2012/09/10/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/
> > , but that's out of date; the sni options have changed.
>
>
> Hi Robin
>
> I fixed the articl
> I actually started with
> http://blog.exceliance.fr/2012/09/10/how-to-get-ssl-with-haproxy-getting-rid-of-stunnel-stud-nginx-or-pound/
> , but that's out of date; the sni options have changed.
Hi Robin
I fixed the article today.
Baptiste
As a starting point, the short version is: have an haproxy that
supports ssl like so:
[rlpowell@mtsinai01 ~]$ /opt/haproxy/usr/local/sbin/haproxy -vv | grep -i ssl
OPTIONS = USE_OPENSSL=1 USE_PCRE=1
Built with OpenSSL version : OpenSSL 1.0.1c 10 May 2012
OpenSSL library supports TLS extensions
SSL is possible in the 1.5 development branch only.
You can find all the necessary informations on the
website http://haproxy.1wt.eu/
If you need someone guiding you step by step trough the configuration,
I would suggest you acquire commercial support:
http://www.exceliance.fr/en/haproxy-profes
8 matches
Mail list logo
