# Configure SSL passthrough

**URL:** <https://discourse.haproxy.org/t/configure-ssl-passthrough/7900>\
**Category:** Help!\
**Created:** [August 14, 2022, 4:32am UTC](https://discourse.haproxy.org/t/configure-ssl-passthrough/7900 "2022-08-14T04:32:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dujas](https://avatars.discourse-cdn.com/v4/letter/d/3da27b/32.png) [@dujas](https://discourse.haproxy.org/u/dujas)\
**Post date:** [August 14, 2022, 4:32am UTC](https://discourse.haproxy.org/t/configure-ssl-passthrough/7900/1 "2022-08-14T04:32:13Z")

</div>

Hi All,  
I would like to configure HAProxy to handle https passthrough and here is the current configuration:

```auto
frontend jiracluster
    mode http
    bind *:443 ssl crt /d/d1/jsm/certs/lb.pem
    default_backend jiracluster

backend jiracluster
    mode http
    balance roundrobin

    server server1 centos8-8:8443 ssl verify required verifyhost centos8-8 ca-file /d/d1/jsm/certs/ca.crt
    server server2 centos8-9:8443 ssl verify required verifyhost centos8-9 ca-file /d/d1/jsm/certs/ca.crt

```

It loaded the login page on [https://centos8-7:443](https://centos8-7:443) but it redirected to the login page again after typing the username and password, is there any misconfiguration above?

Btw, HAProxy is running on server centos8-7, the lb.pem includes centos8-7, centos8-8 and centos8-9 in DNS section already.

Thanks.

Jason

---

<div class="post-metadata">

**Author:** ![Markus](https://avatars.discourse-cdn.com/v4/letter/m/b782af/32.png) [@Markus](https://discourse.haproxy.org/u/Markus)\
**Post date:** [August 15, 2022, 6:54am UTC](https://discourse.haproxy.org/t/configure-ssl-passthrough/7900/2 "2022-08-15T06:54:51Z")

</div>

> [@dujas](#):
>
> `ssl verify required`

this will not work. verify required means you want client authentication via ssl client certificate. you can’t pass this through haproxy to backend. you can do client auth in frontend and then maybe send user string as HTTP Environment Var