http(80) to https(443) ssl redirection not working in haproxy?

Question

I have posted a similar question in stackoverflow. But since this site is better suited for this question, I am reposting it here.I am trying to redirect all requests on port 80 to port 443 ie,redirecting http to https (ssl) using haproxy.I have already created the pem certification file by referring to this link http://fosshelp.blogspot.com/2016/11/how-to-create-pem-file-for-haproxy.html. I have made sure to Append PRIVATE KEY and CRT(self-signed certificate) to mydomain.pem.

mydomain.pem

haproxy.cfg


frontend http-in
    mode    http

    bind *:80
    bind *:443 ssl crt /etc/ssl/private/mydomain.pem
    http-request redirect scheme https code 301 if !{ ssl_fc }

    acl path-employeeList              path_beg -i /employeeList    
    use_backend employeeList-backend   if path-employeeList


backend employeeList-backend
    mode    http

    option  httplog
    option  forwardfor

    http-request set-path /

    server  appserver1 134.209.18.237:5000

Currently I can access my app at http://134.209.18.237/. But when I hit https://134.209.18.237/ I get 503 Service Unavailable No server is available to handle this request.Why is the redirection to https not working?Plz help

Is there anything wrong with my pem certificate file or my haproxy.cfg??Is the certificate file invalid??

Ginnungagap · Accepted Answer · 2019-09-24 06:21:45Z

0

You have no backend for /, only /employeeList so there's in fact no one to handle your request. 503 seems about right.

answered Sep 24 '19 at 6:21

Ginnungagap

1,3546 silver badges6 bronze badges

okay i changed /employeeList to / – Vignesh Swaminathan Sep 24 '19 at 6:58
i also removed http-request set-path / from the backend and now the app is succesfully getting redirected to https – Vignesh Swaminathan Sep 24 '19 at 6:59
but i am still confused? Can you explain me what was the problem with the previous configuration? – Vignesh Swaminathan Sep 24 '19 at 7:01
Take a request for /, look at your frontend configuration and tell me which backend you expect it will use. – Ginnungagap Sep 25 '19 at 21:10
okay lets say if /employeeList is an alias name for the portnumber 5000.How should i change my config if i want to access it at 134.209.18.237/employeeList ? – Vignesh Swaminathan Oct 14 '19 at 7:42

| Show 3 more comments

Stack Exchange Network

current community

your communities

more stack exchange communities

http(80) to https(443) ssl redirection not working in haproxy?

1 Answer 1

Your Answer

Not the answer you're looking for? Browse other questions tagged ssl-certificate haproxy or ask your own question.

Hot Network Questions

http(80) to https(443) ssl redirection not working in haproxy?

1 Answer 1

Your Answer

Sign up or log in

Post as a guest

Not the answer you're looking for? Browse other questions tagged ssl-certificate haproxy or ask your own question.

Related

Hot Network Questions