Hi all,
given an HTTP listener which forwards requests to an SSL backend...:
-----
global
nbproc 1
defaults
mode http
frontend http-in
bind :10080
#bind :10443 ssl crt /tmp/certandkey.pem
default_backend www
mode http
backend www
mode http
server srv01 www.web.de:443 ssl verify required verifyhost
www.nono.com
-----
... I would expect that the traffic is indeed SSL encrypted and also the
verifyhost directive should fail for this host as it does not match the
certificate's subject.
However, the HTTP request is forwarded as is (as HTTP, not HTTPS) to the
backend.
How can the backend connection be configured for SSL?
Regards,
Marco
