Differences

This shows you the differences between two versions of the page.

--- snippets:haproxy [2016/04/01 11:35] – created allspark_cp
+++ snippets:haproxy [2016/04/01 11:59] (current) – allspark_cp
@@ Line 26: / Line 26: @@
     redirect location /other-certificate-error.html unless { ssl_c_verify 0 } ! { path //other-certificate-error.html }
     server helpdesk3 10.20.20.30:80 check
+```
+```
+frontend intranet
+    bind 10.20.30.40:443 ssl crt /etc/haproxy/pem/server.pem ca-file /etc/haproxy/pem/client-chain.pem verify required
+    http-request set-header X-SSL                       %[ssl_fc]
+    http-request set-header X-SSL-Client-Verify         %[ssl_c_verify]
+    http-request set-header X-SSL-Client-SHA1           %{+Q}[ssl_c_sha1]
+    http-request set-header X-SSL-Client-DN             %{+Q}[ssl_c_s_dn]
+    http-request set-header X-SSL-Client-CN             %{+Q}[ssl_c_s_dn(cn)]
+    http-request set-header X-SSL-Issuer                %{+Q}[ssl_c_i_dn]
+    http-request set-header X-SSL-Client-Not-Before     %{+Q}[ssl_c_notbefore]
+    http-request set-header X-SSL-Client-Not-After      %{+Q}[ssl_c_notafter]
+    default_backend example_backend
 ```

allsparks place