在haproxy上設置ssl

Question

我已經有人在Ubuntu上安裝了haproxy。 但是看起來它沒有配置ssl。

haproxy --v

HA-Proxy version 1.5.15 2015/11/01
Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>

Build options :
  TARGET  = 
  CPU     = generic
  CC      = gcc
  CFLAGS  = -O2 -g -fno-strict-aliasing
  OPTIONS = USE_POLL=default

Default settings :
  maxconn = 2000, bufsize = 16384, maxrewrite = 8192, maxpollevents = 200

Encrypted password support via crypt(3): no
Built without zlib support (USE_ZLIB not set)
Compression algorithms supported : identity
Built without OpenSSL support (USE_OPENSSL not set)
Built without PCRE support (using libc's regex instead)
Built with transparent proxy support using: IP_TRANSPARENT IP_FREEBIND

Available polling systems :
       poll : pref=200,  test result OK
     select : pref=150,  test result OK
Total: 2 (2 usable), will use poll.

我還檢查了libssl-dev的狀態，並已正確安裝。

dpkg -l libssl-dev

Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                          Version                     Architecture                Description
+++-=============================================-===========================-===========================-===============================================================================================
ii  libssl-dev:amd64                              1.0.1f-1ubuntu2.8           amd64                       Secure Sockets Layer toolkit - development files

有誰知道我該如何設置SSL？ 我需要重新安裝一次嗎？ 如果是，有人可以給我提供一些鏈接，以指導安裝帶有open_ssl設置的haproxy嗎？

謝謝。

Answer 1

使用USE_OPENSSL = yes從源重建並重新安裝haproxy

git clone http://git.haproxy.org/?p=haproxy-1.6.git
cd haproxy-1.6
make TARGET=linux2628 USE_PCRE=1 USE_OPENSSL=1 USE_ZLIB=1
make install

Answer 2

其他選項是啟用haproxy 1.6 ppa：

sudo add-apt-repository ppa:vbernat/haproxy-1.6

sudo apt-get update

sudo apt-get install haproxy