https://it-grossniklaus.ch/tags/haproxy/ Recent content in Haproxy on it-grossniklaus.ch Hugo de https://it-grossniklaus.ch/pages/topics/security/snippets/haproxy/hardening_https/ Mon, 01 Jan 0001 00:00:00 +0000 https://it-grossniklaus.ch/pages/topics/security/snippets/haproxy/hardening_https/ <ul> <li>Ziel: A Rating im <a href="https://www.ssllabs.com/ssltest/index.html">SSL Server Test</a></li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-fallback" data-lang="fallback"><span class="line"><span class="cl">global </span></span><span class="line"><span class="cl"> crt-base /etc/haproxy/ssl </span></span><span class="line"><span class="cl"> ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">frontend my_haproxy01_SSL_OFFLOAD_https </span></span><span class="line"><span class="cl"> bind *:443 ssl crt /etc/haproxy/ssl-cert-snakeoil.pem crt /etc/haproxy/ssl/ no-sslv3 </span></span></code></pre></div>