Re: Two way authentication issue

Hello, Am 25.08.2017 um 01:47 schrieb Keresztes Péter-Zoltán: > Hello > > Basically what I need is when I browse /service/ws to use client certificate > authentication otherwise for everything else to use normal ssl termination this is not possible with Haproxy. Also, never ever bind to the sa

Re: Two way authentication issue

Hello Basically what I need is when I browse /service/ws to use client certificate authentication otherwise for everything else to use normal ssl termination This configuration was validated by haproxy and it told that it was correct and it works but not with Firefox and google chrome. Please h

Re: Two way authentication issue

Hi Peter, There are several things which looks really wrong in your config. Are you sure this configuration is validated by haproxy ? Or did you only reload and it in facts still uses the old conf ? On 24/08/2017 15:48, Keresztes Péter-Zoltán wrote: Hello, Sorry I was confused about what the c

Re: Will HAProxy community supports mailers section?

Hi All, Thanks for your support. Earlier I have upgraded from 1.4 to 1.7 using source then haproxy working but alerting is not working. I have checked haproxy version using cli command and it has given 1.7.x but if I query rpm then it's giving 1.4.x then I realized that upgrade has some issue.

RE: HAProxy 1.7.8 compile problem with new OpenSSL

Thanks. I see you solved the problem by copying the new version directly to /usr/bin and /usr/lib64. I did this: tar xvf /apps/Config/openssl-1.0.2-latest.tar.gz cd openssl-1.0.2l ./config shared make make install echo /usr/local/ssl/lib > /etc/ld.so.conf.d/libssl.conf ldconfig cd /tmp t

RE: HAProxy 1.7.8 compile problem with new OpenSSL

I ​n case you still need it: # Install required libraries sudo yum -y update sudo yum -y install make gcc perl pcre-devel zlib-devel openssl-devel # Install Updated Openssl-1.1.0f wget https://www.openssl.org/source/openssl-1.1.0f.tar.gz tar -zxf openssl-1.1.0f.tar.gz cd openssl-1.1.0f ./config

Re: Will HAProxy community supports mailers section?

On 08/24/2017 03:35 PM, Rajesh Kolli wrote: Hi Daniel, I have changed my config file according to you, even though i am getting the same error. - haproxy.service - HAProxy Load Balancer Loaded: loaded (/usr/lib/systemd/system/haproxy.service; enabled) Active: inactive (

Re: Two way authentication issue

Hello, Sorry I was confused about what the client wanted. First I thought hat they want to talk ssl with the backend but they actually want a client certificate authentication. I have modified my haproxy.cfg with the following configurations: log /dev/loglocal0 log 127.0.0.1 local2

Re: Will HAProxy community supports mailers section?

Hi, I am using latest version. [root@DS-11-82-R7-CLST-Node1 ~]# haproxy -v HA-Proxy version 1.7.8 2017/07/07 Copyright 2000-2017 Willy Tarreau On Thu, Aug 24, 2017 at 6:59 PM, Jérôme Magnin wrote: > On Thu, Aug 24, 2017 at 06:50:51PM +0530, Rajesh Kolli wrote: > > Hi Daniel, > > > > Thanks

Re: Will HAProxy community supports mailers section?

Hi Daniel, I have changed my config file according to you, even though i am getting the same error. - haproxy.service - HAProxy Load Balancer Loaded: loaded (/usr/lib/systemd/system/haproxy.service; enabled) Active: inactive (dead) since Thu 2017-08-24 19:04:14 IST; 6s ag

Re: Will HAProxy community supports mailers section?

On Thu, Aug 24, 2017 at 06:50:51PM +0530, Rajesh Kolli wrote: > Hi Daniel, > > Thanks for your quick response... > > i am getting this error if i use mailers section in my configuration. > - >

Re: Will HAProxy community supports mailers section?

Hi Rajesh, Rajesh Kolli wrote: > i am getting this error if i use mailers section in my configuration. The ability to send mail alerts (and thus to configure this with a mailers section) was added in HAProxy 1.6. If you use an older version, this feature is not yet available to you. Once you upd

Re: Will HAProxy community supports mailers section?

Hi Rajesh, as far as I know (but may be wrong) the "mailers" config has to be defined before any listen, frontend or backend directives. Also the "email-alert" has to be defined after the backend. So in your case it would look like this: #--

Re: Will HAProxy community supports mailers section?

Hi Daniel, Thanks for your quick response... i am getting this error if i use mailers section in my configuration. - [root@DS-11-82-R7-CLST-Node1 ~]# systemctl status haproxy.service -l haproxy

Re: Will HAProxy community supports mailers section?

Hi Rajesh, the community version supports mailers. Here is a working section from my configuration: mailers mymailserver mailer smtp1 10.1.0.251:25 frontend frontend_CHANGEME bind *:443 ssl crt /opt/etc/haproxy/haproxy-t.pem force-tlsv12 no-sslv3 ###

Will HAProxy community supports mailers section?

Hello, I am new to HAProxy, present i am using community version of haproxy, and i am trying to configure alerting in my configuration, after i configure "mailers" section and after restart of service it is throwing "unknown keyword mailers" in frontend. Now, my doubt is... will HAProxy comm

Use lua to get query string blocking request ？

Hi, haproxy version 1.6.9 2016/08/30, In core.register_action by http-req, use txn.f:query() get query string, if it does not exist, then will block for some time?