在haproxy上设置ssl

时间:2016-07-18 00:38:58

标签: ssl haproxy

我已经在其他人的ubuntu上安装了haproxy。但看起来它没有配置ssl。

haproxy --v

HA-Proxy version 1.5.15 2015/11/01
Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>

Build options :
  TARGET  = 
  CPU     = generic
  CC      = gcc
  CFLAGS  = -O2 -g -fno-strict-aliasing
  OPTIONS = USE_POLL=default

Default settings :
  maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200

Encrypted password support via crypt(3): no
Built without zlib support (USE_ZLIB not set)
Compression algorithms supported : identity
Built without OpenSSL support (USE_OPENSSL not set)
Built without PCRE support (using libc's regex instead)
Built with transparent proxy support using: IP_TRANSPARENT IP_FREEBIND

Available polling systems :
       poll : pref=200,  test result OK
     select : pref=150,  test result OK
Total: 2 (2 usable), will use poll.

我还检查了libssl-dev的状态,并且安装正确。

dpkg -l libssl-dev

Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                          Version                     Architecture                Description
+++-=============================================-===========================-===========================-===============================================================================================
ii  libssl-dev:amd64                              1.0.1f-1ubuntu2.8           amd64                       Secure Sockets Layer toolkit - development files

有谁知道我如何设置ssl?我需要重新安装吗?如果是,有人可以提供一些链接到指示安装haproxy与open_ssl设置?

感谢。

2 个答案:

答案 0 :(得分:3)

使用USE_OPENSSL = yes

从源代码重建并重新安装haproxy
git clone http://git.haproxy.org/?p=haproxy-1.6.git
cd haproxy-1.6
make TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1
make install

答案 1 :(得分:1)

其他选项是启用haproxy 1.6 ppa:

sudo add-apt-repository ppa:vbernat/haproxy-1.6

sudo apt-get update

sudo apt-get install haproxy