# Trouble Configuring SSL Termination with HAProxy

**URL:** <https://discourse.haproxy.org/t/trouble-configuring-ssl-termination-with-haproxy/11572>\
**Category:** Help!\
**Created:** [January 27, 2025, 10:05am UTC](https://discourse.haproxy.org/t/trouble-configuring-ssl-termination-with-haproxy/11572 "2025-01-27T10:05:48Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sienna](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/sienna/32/2391_2.png) [@Sienna](https://discourse.haproxy.org/u/Sienna)\
**Post date:** [January 27, 2025, 10:05am UTC](https://discourse.haproxy.org/t/trouble-configuring-ssl-termination-with-haproxy/11572/1 "2025-01-27T10:05:48Z")

</div>

Hello

I am facing difficulties setting up SSL termination for my HAProxy instance and need some assistance. 🙃 The issue arises when I try to serve HTTPS traffic through HAProxy while forwarding requests to backend servers using HTTP. Despite following several guides, the SSL handshake seems to fail, and I get browser errors indicating that the connection isn’t secure.

Here’s my setup:

- HAProxy is running on a Ubuntu 22.04 server.
- I’ve installed a Let’s Encrypt SSL certificate, and the `.pem` file is placed in the correct directory.
- Frontend is configured to listen on port 443 with the SSL certificate. Backend servers are running HTTP on port 80.

Below is a snippet of my configuration file:

frontend https\_front  
bind \*:443 ssl crt /etc/haproxy/certs/certificate.pem  
default\_backend http\_back

backend http\_back  
server server1 192.168.1.10:80 check

Whenever I attempt to access the site, the browser throws a “SSL\_PROTOCOL\_ERROR” or “ERR\_SSL\_HANDSHAKE\_FAILURE” message. I’ve ensured that the certificate is valid and not expired. Additionally, I checked the HAProxy logs, but there aren’t any clear error messages indicating what might be going wrong. 🙃 Checked [HAProxy SSL Termination (Offloading) Everything to Know](https://www.haproxy.com/blog/haproxy-ssl-termination) [Okta](https://www.igmguru.com/cyber-security/okta-training) documentation guide for reference .

Can someone help me identify the potential misconfiguration or steps I might have missed? 🤔 Any tips on debugging SSL issues with HAProxy would also be greatly appreciated!

Thank you ! 🙂