On HA-Proxy 2.3.4 I got the following message when I'm applying the ssl-confi-generator configuration:
Proxy 'https': no-sslv3/no-tlsv1x are ignored for bind '*:443' at [/etc/haproxy/haproxy.cfg:78]. Use only 'ssl-min-ver' and 'ssl-max-ver' to fix.
So I changed ssl-default-bind-options prefer-client-ciphers and ssl-default-server-options values to: no-tls-tickets ssl-min-ver TLSv1.2 (instead of no-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets)
Hello,
On HA-Proxy 2.3.4 I got the following message when I'm applying the ssl-confi-generator configuration:
Proxy 'https': no-sslv3/no-tlsv1x are ignored for bind '*:443' at [/etc/haproxy/haproxy.cfg:78]. Use only 'ssl-min-ver' and 'ssl-max-ver' to fix.
So I changed
ssl-default-bind-options prefer-client-ciphers
andssl-default-server-options
values to:no-tls-tickets ssl-min-ver TLSv1.2
(instead ofno-sslv3 no-tlsv10 no-tlsv11 no-tls-tickets
)