我想在HAproxy-1.5.2中禁用安全重新协商,但在官方文档中找不到任何有关它的信息: http : //www.haproxy.org/download/1.5/doc/configuration.txt
我的SSL HAproxy conf:
tune.ssl.default-dh-param 2048 ssl-default-bind-ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:... bind :443 ssl crt ./cert.pem no-sslv3
其实:
root# openssl s_client -connect xxxx:443 |grep "Secure" Secure Renegotiation IS supported
我想要:
root# openssl s_client -connect xxxx:443 |grep "Secure" Secure Renegotiation NOT supported
任何人都可以帮助我?