HAProxy community

Ssl-hello-chk tls version

Hello all

Does anyone know a way of using ssl-hello-chk with tls1+ it seems to only use ssv3 so my backend servers reject the request

Thanks

Dave

Use the check-ssl directive, it replaces the old ssl-hello-chk. It actually uses OpenSSL, while ssl-hello-chk is a manually constructed tcp frame.

Hi Lukas

Thanks for this, not sure how i missed this option!

Thanks

Dave

You can also try ‘option tcp-check’ while making tcp connection.