I've been searching the net extensively but I'm not able to find a solution to this problem.
I have setup two servers behind KeepAlived and HAProxy. When both servers are up, I can see that both servers are hit (looking at the application logs) and that both work fine. However, when I take down the primary server, the clients are not able to connect to the second server and fail with SSL Handshake failure. Both servers have identical configurations for HAProxy and their SSL certificates are both identical.
My partial HAProxy configuration is:
listen authentication_service bind xxx.xxx.xxx.111:2222 ssl crt /etc/ssl/certs/mycert.pem ciphers ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!RC4+R$ balance roundrobin option tcpka option tcplog server serv1 xxx.xxx.xxx.xx1:2222 check inter 2000 rise 2 fall 5 server serv2 xxx.xxx.xxx.xx2:2222 check inter 2000 rise 2 fall 5
To re-iterate, serv1 on its own or together with serv2 works fine. It's only when I take down serv1 that I get the SSL failures.
The HAProxy log for the failure is:
Jan 3 14:21:08 serv-2 haproxy: [client ip address]:xyz [03/Jan/2015:14:21:08.734] authentication_service/1: SSL handshake failure
Would anyone be able to help me?
Many thanks in advance,