How can I verify Haproxy backend HTTPS server as in browser I can?How can I make Haproxy don't send SNI field...
Can one live in the U.S. and not use a credit card?
NASA's RS-25 Engines shut down time
Could you please stop shuffling the deck and play already?
Distinction between apt-cache and dpkg -l
Accepted offer letter, position changed
If I receive an SOS signal, what is the proper response?
How many characters using PHB rules does it take to be able to have access to any PHB spell at the start of an adventuring day?
What wound would be of little consequence to a biped but terrible for a quadruped?
Can Mathematica be used to create an Artistic 3D extrusion from a 2D image and wrap a line pattern around it?
Did Carol Danvers really receive a Kree blood tranfusion?
Why would one plane in this picture not have gear down yet?
In the late 1940’s to early 1950’s what technology was available that could melt a LOT of ice?
How to detect if C code (which needs 'extern C') is compiled in C++
Should I tell my boss the work he did was worthless
Is it "Vierergruppe" or "Viergruppe", or is there a distinction?
Is it necessary to separate DC power cables and data cables?
Filtering SOQL results with optional conditionals
Latex does not go to next line
Are tamper resistant receptacles really safer?
Do f-stop and exposure time perfectly cancel?
Database Backup for data and log files
How can The Temple of Elementary Evil reliably protect itself against kinetic bombardment?
Signed and unsigned numbers
PTIJ: Should I kill my computer after installing software?
How can I verify Haproxy backend HTTPS server as in browser I can?
How can I make Haproxy don't send SNI field to backend server?Getting 502 instead of 503 when all backend servers are down running HAProxy behind ApacheSecuring using SSL multiple web servers behind a single IP addressApache Proxy - SSL Authentication failure on back end of proxy (Client side)HAProxy to redirect http to https for multiple domain names without SSL TerminationCan I use HAProxy's new 'capture' feature to save the remote address in a TCP frontend, and use it as the `X-Forwarded-For` header in an HTTP backend?How to secure HAProxy TCP stats socket? Needed for remote operationHaProxy Frontend to Backend queuing and timeoutsopenldap with haproxy - (ldap_result() failed: Can't contact LDAP server)TCP passthrough for HTTP connection with haproxyhaproxy hide backend url
Haproxy's documentation says the ssl and the verify server option enable verify on backend server's certificate via one ca-file but I try to use Firefox export the backend server's CA file then use the exported CA file to verify backend server and I get the 503 Service Unavailable prompt.
Why the CA file and SSL verify doesn't work?
Note the simplest TCP mode reverse proxy not helpful in this case because I don't want to send the SNI information.
reverse-proxy haproxy
asked 2 days ago
illiterateilliterate
1305
add a comment |
Haproxy's documentation says the ssl and the verify server option enable verify on backend server's certificate via one ca-file but I try to use Firefox export the backend server's CA file then use the exported CA file to verify backend server and I get the 503 Service Unavailable prompt.
Why the CA file and SSL verify doesn't work?
Note the simplest TCP mode reverse proxy not helpful in this case because I don't want to send the SNI information.
reverse-proxy haproxy
asked 2 days ago
illiterateilliterate
1305
add a comment |
Haproxy's documentation says the ssl and the verify server option enable verify on backend server's certificate via one ca-file but I try to use Firefox export the backend server's CA file then use the exported CA file to verify backend server and I get the 503 Service Unavailable prompt.
Why the CA file and SSL verify doesn't work?
Note the simplest TCP mode reverse proxy not helpful in this case because I don't want to send the SNI information.
reverse-proxy haproxy
asked 2 days ago
illiterateilliterate
1305
Haproxy's documentation says the ssl and the verify server option enable verify on backend server's certificate via one ca-file but I try to use Firefox export the backend server's CA file then use the exported CA file to verify backend server and I get the 503 Service Unavailable prompt.
Why the CA file and SSL verify doesn't work?
Note the simplest TCP mode reverse proxy not helpful in this case because I don't want to send the SNI information.
reverse-proxy haproxy
reverse-proxy haproxy
asked 2 days ago
illiterateilliterate
1305
asked 2 days ago
illiterateilliterate
1305
edited 9 mins ago
illiterate
asked 2 days ago
illiterateilliterate
1305
asked 2 days ago
illiterateilliterate
1305
asked 2 days ago
illiterateilliterate
1305
1305
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Why the CA file and SSL verify doesn't work?
The reason is you export the CA file as X.509 Certificate (PEM), that is not the correct CA file.
You must use the ca-file server option with the correct CA file.
Use Browser(Firefox) Export website certificate save as X.509 Certificate with chain(PEM) to get the correct CA file.
For example server wikipedia-server 208.80.153.224 ssl verify required ca-file /path/to/*wikipediaorg.crt
answered 20 hours ago
illiterateilliterate
1305
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f957488%2fhow-can-i-verify-haproxy-backend-https-server-as-in-browser-i-can%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Why the CA file and SSL verify doesn't work?
The reason is you export the CA file as X.509 Certificate (PEM), that is not the correct CA file.
You must use the ca-file server option with the correct CA file.
Use Browser(Firefox) Export website certificate save as X.509 Certificate with chain(PEM) to get the correct CA file.
For example server wikipedia-server 208.80.153.224 ssl verify required ca-file /path/to/*wikipediaorg.crt
answered 20 hours ago
illiterateilliterate
1305
add a comment |
Why the CA file and SSL verify doesn't work?
The reason is you export the CA file as X.509 Certificate (PEM), that is not the correct CA file.
You must use the ca-file server option with the correct CA file.
Use Browser(Firefox) Export website certificate save as X.509 Certificate with chain(PEM) to get the correct CA file.
For example server wikipedia-server 208.80.153.224 ssl verify required ca-file /path/to/*wikipediaorg.crt
answered 20 hours ago
illiterateilliterate
1305
add a comment |
Why the CA file and SSL verify doesn't work?
The reason is you export the CA file as X.509 Certificate (PEM), that is not the correct CA file.
You must use the ca-file server option with the correct CA file.
Use Browser(Firefox) Export website certificate save as X.509 Certificate with chain(PEM) to get the correct CA file.
For example server wikipedia-server 208.80.153.224 ssl verify required ca-file /path/to/*wikipediaorg.crt
answered 20 hours ago
illiterateilliterate
1305
Why the CA file and SSL verify doesn't work?
The reason is you export the CA file as X.509 Certificate (PEM), that is not the correct CA file.
You must use the ca-file server option with the correct CA file.
Use Browser(Firefox) Export website certificate save as X.509 Certificate with chain(PEM) to get the correct CA file.
For example server wikipedia-server 208.80.153.224 ssl verify required ca-file /path/to/*wikipediaorg.crt
answered 20 hours ago
illiterateilliterate
1305
edited 13 hours ago
answered 20 hours ago
illiterateilliterate
1305
answered 20 hours ago
illiterateilliterate
1305
answered 20 hours ago
illiterateilliterate
1305
1305
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f957488%2fhow-can-i-verify-haproxy-backend-https-server-as-in-browser-i-can%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
