title: Haproxy ssl configuration - install root and intermediate certificate
body: <p>After to much googling, i finally made my haproxy ssl to works. But now i got problem because root and  intermediate  certificate is not installed so my ssl don`t have green bar.</p>
  
  <p>My haproxy config</p>
  
  <pre><code>global
        maxconn     4096 
        nbproc      1
        #debug
        daemon
        log         127.0.0.1    local0
  
    defaults
        mode        http
        option      httplog
        log         global
      timeout connect 5000ms
      timeout client 50000ms
      timeout server 50000ms
  
    frontend unsecured
        bind 192.168.0.1:80
        timeout     client 86400000
        reqadd X-Forwarded-Proto:\ http
        default_backend      www_backend
  
    frontend  secured
    mode http
     bind 192.168.0.1:443 ssl crt /etc/haproxy/cert.pem
     reqadd X-Forwarded-Proto:\ https
    default_backend www_backend
  
    backend www_backend
        mode        http
        balance     roundrobin
        #cookie      SERVERID insert indirect nocache
        #option      forwardfor
        server      server1 192.168.0.2:80  weight 1 maxconn 1024 check
        server      server2 192.168.0.2:80  weight 1 maxconn 1024 check
  </code></pre>
  
  <p>192.168.0.1 is my load balancer ip. /etc/haproxy/cert.pem contain private key and domain certificate eg. www.domain.com</p>
  
  <p>There is <a href="https://stackoverflow.com/questions/14670160/haproxy-ssl-segfault-with-1-5-dev17">another question with ssl configuration</a>, which include bundle.crt. When i contacted my ssl support, they told me i need to install root and intermediate  certificate.</p>
  
  <p>From <a href="https://support.comodo.com/index.php?_m=knowledgebase&amp;_a=viewarticle&amp;kbarticleid=1209" rel="nofollow noreferrer">Comodo Documentation</a>, creating bundle is simple as merging their crt, which i made.</p>
  
  <p>But when i try to reconfig my haproxy config as </p>
  
  <pre><code>bind 192.168.0.1:443 ssl crt /etc/haproxy/cert.pem ca-file /path/to/bundle.crt
  </code></pre>
  
  <p>Im getting error that i cant use that config parameter on bind.</p>
  
  <p>p.s im using 1.5 dev12 version. With latest dev17 version i had problems even starting haproxy <a href="https://stackoverflow.com/questions/14670160/haproxy-ssl-segfault-with-1-5-dev17">as on this post</a> </p>
  
  <p><img src="https://i.stack.imgur.com/Of3nL.png" alt="enter image description here"></p>