Rabu, 09 Oktober 2019

How to fix Setting tune.ssl.default-dh-param to 1024 by default on Haproxy

  Tidak ada komentar
How to fix Setting tune.ssl.default-dh-param to 1024 by default
[root@localhost haproxy]# haproxy -c -V -f /etc/haproxy/haproxy.cfg
[WARNING] 281/142814 (148799) : Setting tune.ssl.default-dh-param to 1024 by default, if your workload permits it you should set it to at least 2048. Please set a value >= 1024 to make this warning disappear.
Configuration file is valid
Add the following bold line text on global setting
global
    log 127.0.0.1 local0 notice
    maxconn 2000
    user haproxy
    group haproxy
    ssl-default-bind-options no-sslv3
    tune.ssl.default-dh-param 2048
Test the haproxy config again
[root@localhost haproxy]# haproxy -c -V -f /etc/haproxy/haproxy.cfg
Configuration file is valid
[root@localhost haproxy]#

Tidak ada komentar :

Posting Komentar