<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>Hello,</div>
<div> </div>
<div>Maybe you're interested in also getting a chapter about TLS configuration for HAProxy in the bettercrypto.org document?<br/>
I'm using something similar to this line to migitate the POODLE leak - the important part is no-sslv3 - the cipher list is the same as it looks for nginx.</div>
<div> </div>
<div>bind 0.0.0.0:443 ssl crt /path/to/certfile.crt ciphers EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA no-sslv3</div>
<div> </div>
<div>Source:<br/>
http://blog.haproxy.com/2014/10/15/haproxy-and-sslv3-poodle-vulnerability/</div>
<div> </div>
<div>Tested with Version 1.5.x of HAProxy.</div>
<div> </div>
<div> </div>
<div>Georg</div>
</div></div></body></html>