Generate self-signed certificate for HAProxy

gistfile1.txt

# Generate a unique private key (KEY)
sudo openssl genrsa -out mydomain.key 2048

# Generating a Certificate Signing Request (CSR)
sudo openssl req -new -key mydomain.key -out mydomain.csr

# Creating a Self-Signed Certificate (CRT)
openssl x509 -req -days 365 -in mydomain.csr -signkey mydomain.key -out mydomain.crt

# Append KEY and CRT to mydomain.pem
sudo bash -c 'cat mydomain.key mydomain.crt >> /etc/ssl/private/mydomain.pem'

# Specify PEM in haproxy config
sudo vim /etc/haproxy/haproxy.cfg
listen haproxy
  bind 0.0.0.0:443 ssl crt /etc/ssl/private/mydomain.pem

Thank you, it works perfectly!

I recommend use of single inequality sign (>) instead of double (>>) in line 11:

sudo bash -c 'cat mydomain.key mydomain.crt > /etc/ssl/private/mydomain.pem'

If you do mistake in previous key or cert file and run this command with double ones, it will append to file instead of overriding. In my case it lead to confusing errors of "inconsistencies between private key and certificate".