Haproxy SSL Termination question

2013-05-15 Thread Joseph Hardeman
Hi Everyone,

I am in need of a little help, currently I need to send traffic to a
haproxy setup and terminate the SSL certificate there, which I have
working, but until I can get a backend application changed from redirecting
when it gets the https request to a login page, is there any way I can
connect to the backend server(s) over port 443 so it fakes it to the server
and the page redirection continues to work?  At least until we can get the
code updated to use say port 8443 on the server instead of 443?

Just curious and thought I would ask the experts out there. :-)

Thanks in advance.

Joe


Re: Haproxy SSL Termination question

2013-05-15 Thread PiBa-NL

Hi Joe,
Sounds like you need the 'ssl' option for your backend server.

This option enables SSL ciphering on outgoing connections to the server.

Just below the source option: 
http://cbonte.github.io/haproxy-dconv/configuration-1.5.html#5-source

(#5-ssl goes to wrong part of the help.. for 'bind' instead of 'server')

Op 15-5-2013 23:14, Joseph Hardeman schreef:

Hi Everyone,

I am in need of a little help, currently I need to send traffic to a 
haproxy setup and terminate the SSL certificate there, which I have 
working, but until I can get a backend application changed from 
redirecting when it gets the https request to a login page, is there 
any way I can connect to the backend server(s) over port 443 so it 
fakes it to the server and the page redirection continues to work?  At 
least until we can get the code updated to use say port 8443 on the 
server instead of 443?


Just curious and thought I would ask the experts out there. :-)

Thanks in advance.

Joe