You where right! I forgot to install the newly compiled binary, working with the one without ssl support!
On Thu, Aug 31, 2017 at 1:28 PM, Cyril Bonté <[email protected]> wrote: > Hi Thomas, > >> De: "Thomas Schweikle" <[email protected]> >> À: [email protected] >> Envoyé: Jeudi 31 Août 2017 12:48:39 >> Objet: Error on "tcp-check connect port 3389 ssl" in config >> >> Hi! >> >> Trying to configure haproxy to act as a connection broker and load >> balancer for RDP (aka Microsoft Terminal Services). >> >> While configuring the backend, I found haproxy choke on >> >> tcp-check connect port 3389 ssl >> >> with message: >> >> [ALERT] 242/124152 (6066) : parsing [/etc/haproxy/haproxy.cfg:33] : >> 'tcp-check connect' expects 'comment', 'port', 'send-proxy' or but >> got >> 'ssl' as argument. >> >> Within the handbook I find (section "tcp-check connect"): >> >> tcp-check connect port 443 ssl >> >> If it chokes on this -- is it a bug? Or anything else? >> >> # haproxy -v >> HA-Proxy version 1.7.9 2017/08/18 >> Copyright 2000-2017 Willy Tarreau <[email protected]> > > I guess that you compiled haproxy yourself and forgot to enable the SSL > support. > If you run the following command : > haproxy -vv > it will probably show you that haproxy was compiled without SSL support. > > Cyril Bonté -- Thomas
