Where to install my ssl certs for HAPROXY as a load balancer

Help!
1

Hi I am a complete noob to Haproxy and load balancing.

I’m trying to install my site’s SSL certificates and set the DNS name for a server that is using HAProxy for load balancing. Specifically I am following the instructions provided here Thingsboard Haproxy config steps

What is missing is any instructions on bringing your own SSL certificates and where to install them? I can see from the scripts that the cert directory is

/usr/share/tb-haproxy/certs.d

Do I just unzip my SSL certs from my provider into this directory after step 8 and then continue with the instructions?

Thanks in advance

2

Hi,

I feel you. I’ve been there. But then here’s my recommendation. Please do read about how HAPRoxy works first rather than straight away jumping into third-party articles. Please always remember that there is no shortcut to success. Read this first thoroughly: https://www.haproxy.com/blog/the-four-essential-sections-of-an-haproxy-configuration/

Then this: https://serversforhackers.com/c/using-ssl-certificates-with-haproxy

In the end you should be able to come to the conclusion that you need a PEM file with the full chain + private key for your domain and then you need to give a path to it right after you bind directive.

Hope this helps.

3

Thanks @ronnie. your suggestion is the right way to go as difficult as it is to just want the easy answer.

Just FYI the link i gave was not a third party article but a set of instructions provided by the software provider that I’m trying to setup HaProxy for. Their instructions however are not complete and don’t address my use case (and I’m not knowledgeable enough to know if they address my use case with some tweaking :wink: ) I’ll poke through the links and post when I have some more informed questions :slight_smile: