[chef] Re: haproxy Cookbook

[Eric Herot < >]

I would strongly suggest pairing the haproxy cookbook with the stunnel cookbook in order to get this working.  Otherwise haproxy has no native support for SSL.  The SSL options in that cookbook just create another listener for you to then connect to (with, for example, stunnel).

Does that answer your question?

BTW if you find that cookbook confusing or insufficient (we did, but the last time I looked at it was a while ago), we also maintain one which is pretty functional (although the docs may be slightly out of date at this point):

https://github.com/evertrue/et_haproxy-cookbook

-- 
Eric

On March 13, 2014 at 5:15:52 PM, Douglas Garstang ( "> ) wrote:

Can anyone recommend a functional haproxy cookbook that support sssl? The most likely candidate, at https://github.com/hw-cookbooks/haproxy, has knobs for enabling ssl, but as far as I can see, no way to pass the pem file location. (the setting is 'crt' i think).

Alternatively, if there's a way a wrapper cookbook could easily add that functionality...

Douglas