Hi Sander,
> When testing this config I get:
>
> [ALERT] 326/202736 (24201) : SSLv3 support requested but unavailable.
> Configuration file is valid
>
> After testing with ssllabs I also noticed tlsv10 and tlsv11 were still
> enabled. Downgrading to haproxy 1.5.14 removes the error when testing
> the config and shows the tls protocols as disabled when using ssllabs.
1.5.15 is probably affected as well (the error above comes from a build fix
for libssl that has been backported to 1.5).
Not quite sure why we would see this behavior though.
Can you provide "haproxy -vv" output of both 1.5.14 and 1.6.2 executables?
Thanks,
Lukas
