bren-doyle
bren-doyle
No does not help: "ssl_certificate": "/run/ssl/www.example.com.pem", {"address":"192.16.1.103","ciphers":"ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA256","crt_list":"/run/ssl/crt_list.txt","name":"vcn1_lb1_vip","port":443,"prefer_client_ciphers":true,"ssl":true,"ssl_certificate":"/run/ssl/www.example.com.pem","ssl_max_ver":"TLSv1.2","ssl_min_ver":"TLSv1.0","verify":"required"} {"code":400,"message":"14: err transactionId=7f94757c-a2ed-45f8-8c38-87c0c4470b35 \nmsg=\"Proxy 'https_443': verify is enabled but no CA file specified for bind '192.16.1.103:443' at [/tmp/haproxy/192.16.1.100_haproxy.cfg.7f94757c-a2ed-45f8-8c38-87c0c4470b35:50].\"\nmsg=\"Fatal errors found in configuration.\""}
It does I use the same cert in an ssl file and it works fine just that crt or ssl_certificate are ignored, so "crt_list": "/run/ssl/crt_list.txt", where crt_list.txt contains www.example.com.pem works,...