Re: connection is rejected when using ipad with send-proxy option

[Pavlos Parissis]

On 15/01/2015 09:16 μμ, Alex Wu wrote:
> We enable send-proxy for ssl connections, and have the patched apache
> module to deal with proxyprotocol.
> 
> From Mac OS, we see it works as designed. But when we repeat the same
> test using ipad, then we the connection rejected. iPad cannot establish
> the connection to haproxy over ssl.
> 


Are you getting TCP RST or SSL error? It could be that you are missing
the intermediate certificate chain in your Apache setup and the webtrust
of iPad doesn't contain the certificate of the CA which issued your
certificate.

Cheers,
Pavlos




signature.asc
Description: OpenPGP digital signature

Re: connection is rejected when using ipad with send-proxy option

[Willy Tarreau]

On Thu, Jan 15, 2015 at 12:16:13PM -0800, Alex Wu wrote:
> We enable send-proxy for ssl connections, and have the patched apache module 
> to deal with proxyprotocol.
> 
> >From Mac OS, we see it works as designed. But when we repeat the same test 
> >using ipad, then we the connection rejected. iPad cannot establish the 
> >connection to haproxy over ssl.

I don't understand, your iPad doesn't support the proxy protocol, so
why would you expect it to work ?

Willy

connection is rejected when using ipad with send-proxy option

[Alex Wu]

We enable send-proxy for ssl connections, and have the patched apache module to 
deal with proxyprotocol.

>From Mac OS, we see it works as designed. But when we repeat the same test 
>using ipad, then we the connection rejected. iPad cannot establish the 
>connection to haproxy over ssl.

What should we debug further?

Alex