# Certificate to acess backend with TLS

**URL:** <https://discourse.haproxy.org/t/certificate-to-acess-backend-with-tls/2525>\
**Category:** Help!\
**Created:** [May 22, 2018, 2:52pm UTC](https://discourse.haproxy.org/t/certificate-to-acess-backend-with-tls/2525 "2018-05-22T14:52:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![tiagocruz](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/tiagocruz/32/193_2.png) [@tiagocruz](https://discourse.haproxy.org/u/tiagocruz)\
**Post date:** [May 22, 2018, 2:52pm UTC](https://discourse.haproxy.org/t/certificate-to-acess-backend-with-tls/2525/1 "2018-05-22T14:52:54Z")

</div>

- nginx:

```auto
server {
  listen 10010;
  location / {
    proxy_pass https://consumersoa.xxx.com:443;
    proxy_ssl_certificate /keys/xxxx.messaging_com.crt;
    proxy_ssl_certificate_key /keys/xxxx.messaging_com.key;
    proxy_ssl_protocols TLSv1;
  }
}

```

- haproxy

```auto
frontend fe_10010
    bind :10010

backend be_soa
    server soa consumer.xxxx:443 check crt /keys/xxxx.messaging_com force-tlsv10

```

This is not working… can you tell me where is wrong?

Thanks!

---

<div class="post-metadata">

**Author:** ![lukastribus](https://avatars.discourse-cdn.com/v4/letter/l/7ea924/32.png) [@lukastribus](https://discourse.haproxy.org/u/lukastribus)\
**Post date:** [May 22, 2018, 5:24pm UTC](https://discourse.haproxy.org/t/certificate-to-acess-backend-with-tls/2525/2 "2018-05-22T17:24:27Z")

</div>

Don’t post into configuration samples if you need support. I moved this topic to Help.

As for your error, I suggest you enable logging and read it’s contents.

---

<div class="post-metadata">

**Author:** ![tiagocruz](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/tiagocruz/32/193_2.png) [@tiagocruz](https://discourse.haproxy.org/u/tiagocruz)\
**Post date:** [May 22, 2018, 6:20pm UTC](https://discourse.haproxy.org/t/certificate-to-acess-backend-with-tls/2525/3 "2018-05-22T18:20:55Z")

</div>

Sorry Luka!

Now is working with

`ssl check crt cert.key force-tlsv10 verify none`