Skip to content

Instantly share code, notes, and snippets.

@marcelog

marcelog/sample_ssl_haproxy.conf

Created July 15, 2017 19:06
Show Gist options
  • Save marcelog/f5083d135fd1ae3532d953fc7a5c6939 to your computer and use it in GitHub Desktop.
Save marcelog/f5083d135fd1ae3532d953fc7a5c6939 to your computer and use it in GitHub Desktop.
Download ZIP
Setup HAProxy for offload SSL connections and to check client certificates
Raw
sample_ssl_haproxy.conf
bind *:443 ssl crt /etc/ssl/certs/mycert.pem ciphers ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA
-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AE
S128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-A
ES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA25
6:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:
!RC4 ca-file /etc/ssl/certs/myca.crt verify optional crt-ignore-err all
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment