Score:0

haroxy client certificat pb

ca flag

I am using client certificat with haproxy (configred with ca file and crl-file )

I am seeing this error in the firefox:

SSL peer had some unspecified issue with the certificate it received

I am seeing this error in the haproxy:

SSl client CA chain canot be verified

I did not have any chain, i have only root ca and client crt.

I used $ openssl verify -CAfile ca.pem client.pem

to verify root CA with client certificat and the result is ok.

I used ca-ignore-err all in haproxy config and the pb is gone

Why ca-ignore-err all in haproxy solved the pb ? what can i do in the log to understand this pb ?

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.