在 haproxy 上设置 ssl

Question

我已经由其他人在 ubuntu 上安装了 haproxy。但是看起来它没有配置 ssl.

haproxy --v

HA-Proxy version 1.5.15 2015/11/01
Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>

Build options :
  TARGET  = 
  CPU     = generic
  CC      = gcc
  CFLAGS  = -O2 -g -fno-strict-aliasing
  OPTIONS = USE_POLL=default

Default settings :
  maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200

Encrypted password support via crypt(3): no
Built without zlib support (USE_ZLIB not set)
Compression algorithms supported : identity
Built without OpenSSL support (USE_OPENSSL not set)
Built without PCRE support (using libc's regex instead)
Built with transparent proxy support using: IP_TRANSPARENT IP_FREEBIND

Available polling systems :
       poll : pref=200,  test result OK
     select : pref=150,  test result OK
Total: 2 (2 usable), will use poll.

我也检查了 libssl-dev 的状态，它安装正确。

dpkg -l libssl-dev

Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                          Version                     Architecture                Description
+++-=============================================-===========================-===========================-===============================================================================================
ii  libssl-dev:amd64                              1.0.1f-1ubuntu2.8           amd64                       Secure Sockets Layer toolkit - development files

有谁知道如何设置 ssl 吗？我需要重新安装吗？如果是，有人可以向我提供一些链接，以指示安装带有 open_ssl 集的 haproxy 吗？

谢谢。

Answer 1

使用 USE_OPENSSL=years

从源代码重建并安装 haproxy

git clone http://git.haproxy.org/?p=haproxy-1.6.git
cd haproxy-1.6
make TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1
make install

Answer 2

其他选项是启用 haproxy 1.6 ppa：

sudo add-apt-repository ppa:vbernat/haproxy-1.6

sudo apt-get update

sudo apt-get install haproxy

在 haproxy 上设置 ssl

setting up ssl on haproxy

ssl

haproxy