OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: tre4bax on June 22, 2020, 10:07:19 pm

Title: HAProxy as forward proxy with SSL
Post by: tre4bax on June 22, 2020, 10:07:19 pm
Hi there I am using the HAProxy service for reverse proxy.

I can happily get the system to work if I only use HTTP, however I wanted to use HTTPS.  I have tried this in two ways.  I have an internal certificate which I generally use with the machine based of a CA on OpnSense.  This works fine internally.  I also have a LE wildcard cert, the problem with this one is it times out so quickly and recently LE on OpnSense has been a bit of a pain.

What I see in the HAProxy logs is " SSL handshake failure".   I have tried this with SSL offloading on and off and with both certificates however I still get the same single message.  Obviously something is not right.  My hope was that it would pass through the certificate and even though I would have a certificate error on the client at least  it would work and the traffic would be encrypted.

Something is wrong with my thinking, anyone know what it is...?