Skip to content

Instantly share code, notes, and snippets.

@yuezhu
Created February 7, 2018 18:10
Show Gist options
  • Star 63 You must be signed in to star a gist
  • Fork 20 You must be signed in to fork a gist
  • Save yuezhu/47b15b4b8e944221861ccf7d7f5868f5 to your computer and use it in GitHub Desktop.
Save yuezhu/47b15b4b8e944221861ccf7d7f5868f5 to your computer and use it in GitHub Desktop.
Generate self-signed certificate for HAProxy
# Generate a unique private key (KEY)
sudo openssl genrsa -out mydomain.key 2048
# Generating a Certificate Signing Request (CSR)
sudo openssl req -new -key mydomain.key -out mydomain.csr
# Creating a Self-Signed Certificate (CRT)
openssl x509 -req -days 365 -in mydomain.csr -signkey mydomain.key -out mydomain.crt
# Append KEY and CRT to mydomain.pem
sudo bash -c 'cat mydomain.key mydomain.crt >> /etc/ssl/private/mydomain.pem'
# Specify PEM in haproxy config
sudo vim /etc/haproxy/haproxy.cfg
listen haproxy
bind 0.0.0.0:443 ssl crt /etc/ssl/private/mydomain.pem
@Youngwoo-Grit-Yoon
Copy link

You have saved my life! Thank you so much, brother.

@LittleSaya
Copy link

Thank you, it works perfectly!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment