How to fix Setting tune.ssl.default-dh-param to 1024 by default on Haproxy
How to fix Setting tune.ssl.default-dh-param to 1024 by default
[root@localhost haproxy]# haproxy -c -V -f /etc/haproxy/haproxy.cfg
[WARNING] 281/142814 (148799) : Setting tune.ssl.default-dh-param to 1024 by default, if your workload permits it you should set it to at least 2048. Please set a value >= 1024 to make this warning disappear.
Configuration file is valid
Add the following bold line text on global setting
global
log 127.0.0.1 local0 notice
maxconn 2000
user haproxy
group haproxy
ssl-default-bind-options no-sslv3
tune.ssl.default-dh-param 2048
Test the haproxy config again
[root@localhost haproxy]# haproxy -c -V -f /etc/haproxy/haproxy.cfg
Configuration file is valid
[root@localhost haproxy]#
Tidak ada komentar :
Posting Komentar