Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issues with Haproxy on passthrough mode #266

Closed
rodrigoraval opened this issue Apr 20, 2017 · 2 comments
Closed

Issues with Haproxy on passthrough mode #266

rodrigoraval opened this issue Apr 20, 2017 · 2 comments

Comments

@rodrigoraval
Copy link

rodrigoraval commented Apr 20, 2017

I have the following scenario: HTTPS (customer) > HTTPS (front) > HTTPS (backend). Nothing is needed on the haproxy but the forwarding. On port 80, works everything fine, and should work on 443 too due to its on passthrough mode.

#########ERROR##########
(as root)
curl -v https://172.22.1.152

  • About to connect() to 172.22.1.152 port 443 (#0)
  • Trying 172.22.1.152...
  • Connected to 172.22.1.152 (172.22.1.152) port 443 (#0)
  • Initializing NSS with certpath: sql:/etc/pki/nssdb
  • CAfile: /etc/pki/tls/certs/ca-bundle.crt
    CApath: none
  • NSS error -12263 (SSL_ERROR_RX_RECORD_TOO_LONG)
  • SSL received a record that exceeded the maximum permissible length.
  • Closing connection 0
    curl: (35) SSL received a record that exceeded the maximum permissible length.

THE CONFIG FILE HAPROXY.CONF

frontend https-incoming
bind *:443
option tcplog
mode tcp

#backend nodes
mode tcp
balance roundrobin

server web01 172.22.1.33:443 check ssl verify none
server web02 172.22.1.34:443 check ssl verify none
server web03 172.22.1.35:443 check ssl verify none

I can see on the logs all my attempts when using curl, but not on the browser. (80 I can see on browser, 443 no).

I need some help here ...

@magiconair
Copy link
Contributor

@rodrigoraval Are you sure you're in the right project? fabio is not haproxy

@magiconair
Copy link
Contributor

I'm going to close this since I believe you're posting this in the wrong project. Feel free to comment in case I'm wrong.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants