在haproxy配置文件中将错误视为未知关键字ssl

时间:2016-01-25 07:08:20

标签: ssl haproxy

这是我的haproxy.cfg文件

var SaveBundle = [{}];
var option = new breeze.SaveOptions({ resourceName: 'SaveChanges'})
var manager = new breeze.EntityManager;
var postData = function () {
    return manager.saveChanges(SaveBundle, option)
         .then(saveSucceeded)
         .fail(saveFailed);
};

重启上面的配置文件后,我收到错误,如下所示

global
    daemon
    maxconn 256

defaults
    mode tcp
    timeout connect 5000ms
    timeout client 50000ms
    timeout server 50000ms


frontend ft_ssltests
        mode tcp
        bind *:443 ssl crt /etc/haproxy/sslkeys/host.crt ca-file /etc/haproxy/sslkeys/host.pem
        default_backend webmail


backend webmail
        balance roundrobin
        server server1 10.198.2.76:50000 maxconn 32 check
        server server2 10.198.2.76:60000 maxconn 32 check

请帮我找到解决方案......

2 个答案:

答案 0 :(得分:15)

haproxy从版本1.5开始支持SSL 检查您正在运行的版本以及是否已编译SSL支持。输入:

$ haproxy -vv
HA-Proxy version 1.6.3 2015/12/25
[...]
Built with OpenSSL version : OpenSSL 1.0.1e 11 Feb 2013
Running on OpenSSL version : OpenSSL 1.0.1e 11 Feb 2013
OpenSSL library supports TLS extensions : yes
OpenSSL library supports SNI : yes
OpenSSL library supports prefer-server-ciphers : yes
[...]

检查这两个强制性的事情。

答案 1 :(得分:0)

使用ssl开关通过以下命令安装haproxy:

make -j 4 TARGET = linux2628 USE_NS = 1 USE_TFO = 1 USE_OPENSSL = 1 USE_ZLIB = 1 USE_PCRE = 1 SSL_INC = / usr / local / openssl / include SSL_LIB = / usr /本地/ openssl / lib