HAProxy as forward proxy with SSL

Started by tre4bax, June 22, 2020, 10:07:19 PM

Previous topic - Next topic
Hi there I am using the HAProxy service for reverse proxy.

I can happily get the system to work if I only use HTTP, however I wanted to use HTTPS.  I have tried this in two ways.  I have an internal certificate which I generally use with the machine based of a CA on OpnSense.  This works fine internally.  I also have a LE wildcard cert, the problem with this one is it times out so quickly and recently LE on OpnSense has been a bit of a pain.

What I see in the HAProxy logs is " SSL handshake failure".   I have tried this with SSL offloading on and off and with both certificates however I still get the same single message.  Obviously something is not right.  My hope was that it would pass through the certificate and even though I would have a certificate error on the client at least  it would work and the traffic would be encrypted.

Something is wrong with my thinking, anyone know what it is...?