Is there an equivalent for Nginx grpc_ssl_certificate directive?

Hi, I am trying to setup HAProxy to replace Nginx as a reverse proxy for a GRPC service. This service is secured by using mutual tls, and the Nginx configuration contains both a certificate and a key so that connections to the backend always are secured by those 2 files. The certificate and key are generated by a custom CA.

Is there any way of telling HAProxy to use that certificate/key to communicate with the backend? Should something like the following line work in the server directive inside a backend block?

Blockquote
backend blah
…
server server1 fqdn:port check ssl verify none crt /certkey.pem ca-file /custom-ca.pem alpn h2

Thanks.

1 post - 1 participant

Read full topic