Re: Trouble with ECC/RSA shared IP/port SSL setup and using unix sockets (localhost method works)

2017-01-05 Thread Vitaly Pecharsky
Nenad That makes total sense - and solved the issue with sockets like a charm. Thanks for the tip on combining the certs, that makes configuration even simpler - that's the approach I am going with for production setup. No more multi-chained backends, yay! On Thu, Jan 5, 2017 at 7:06 PM,

Re: Trouble with ECC/RSA shared IP/port SSL setup and using unix sockets (localhost method works)

2017-01-05 Thread Nenad Merdanovic
Hello, On 1/6/2017 1:55 AM, Vitaly Pecharsky wrote: > haproxy -vv > HA-Proxy version 1.7.1 2016/12/13 > Copyright 2000-2016 Willy Tarreau As you are running 1.7 and OpenSSL 1.1.0, you don't need to do this any more. HAProxy can now natively support ECC/RSA/DSA based on client

Trouble with ECC/RSA shared IP/port SSL setup and using unix sockets (localhost method works)

2017-01-05 Thread Vitaly Pecharsky
Hello We have been trying to test a shared IP/port ECC/RSA SSL implementation that is available in HAProxy, and largely followed this basic setup guide http://blog.haproxy.com/2015/07/15/serving-ecc-and-rsa-certificates-on-same-ip-with-haproxy/ and adapted it to our setup. It works fine using a