HDTutorial
EN

Playback starts YouTube’s embedded player (privacy-enhanced mode).

How to create a PEM file for HAProxy Configure SSL Certificate

26,363 views October 31, 2017 6:00

Watch on YouTube
ChannelATOM

Description from the creator

How to create a PEM file for HAProxy Configure SSL Certificate
fosshelp.blogspot.in/2016/11/how-to-create-pem-…
1
Generate a unique private key KEY
$sudo openssl genrsa -out mydomain.key 2048

Note:
Content in this file start with -----BEGIN RSA PRIVATE KEY-----

2
Generating a Certificate Signing Request CSR
$sudo openssl req -new -key mydomain.key -out mydomain.csr

Note:
Content in this file start with -----BEGIN CERTIFICATE REQUEST-----

3
Creating a Self-Signed Certificate CRT
$openssl x509 -req -days 365 -in mydomain.csr -signkey mydomain.key -out mydomain.crt

Note:
Content in this file start with -----BEGIN CERTIFICATE-----

4
Append KEY and CRT to mydomain.pem
$sudo bash -c 'cat mydomain.key mydomain.crt /etc/ssl/private/mydomain.pem'

Note:
This pem file contains 2 sections certificates, one start with -----BEGIN RSA PRIVATE KEY----- and another one start with -----BEGIN CERTIFICATE-----

5
Specify PEM in haproxy config
$ sudo vim /etc/haproxy/haproxy.cfg
listen haproxy
bind 0.0.0.0:443 ssl crt /etc/ssl/private/mydomain.pem
mode http
option http-server-close
option forwardfor
reqadd X-Forwarded-Proto:\ https
reqadd X-Forwarded-Port:\ 443
option forwardfor if-none
balance roundrobin
option abortonclose
server 192.168.100.224 192.168.100.224:1443 check inter 10s rise 2 fall 3 ssl verify none

6
Restart haproxy
$ sudo service haproxy restart

About this tutorial

ATOM published this 6:00 video tutorial on October 31, 2017. It has been watched 26,363 times on YouTube.

Channel
ATOM
Category
Education
Duration
6:00
Published
October 31, 2017
Views
26,363
Likes
128

Share

This tutorial in other languages