How to fix Setting tune.ssl.default-dh-param to 1024 by default on Haproxy
How to fix Setting tune.ssl.default-dh-param to 1024 by default
[[email protected] haproxy]# haproxy -c -V -f /etc/haproxy/haproxy.cfg
[WARNING] 281/142814 (148799) : Setting tune.ssl.default-dh-param to 1024 by default, if your workload permits it you should set it to at least 2048. Please set a value >= 1024 to make this warning disappear.
Configuration file is valid
Add the following bold line text on global setting
global
log 127.0.0.1 local0 notice
maxconn 2000
user haproxy
group haproxy
ssl-default-bind-options no-sslv3
tune.ssl.default-dh-param 2048
Test the haproxy config again
[[email protected] haproxy]# haproxy -c -V -f /etc/haproxy/haproxy.cfg
Configuration file is valid
[[email protected] haproxy]#
Tidak ada komentar :
Posting Komentar