Configuring TLS with haproxy

Configuring TLS with haproxy ¶ Vinyl Cache famously does not directly support TLS (SSL) like many other http servers, because we believe that sensitive key material should not be kept in the address space of a program processing internet traffic. See Why no SSL? and SSL revisited for details. As of April 2026, unpublished work is ongoing to change this and implement TLS support with a separate key server (which will be called TLSentinel, so you have a reference for future announcements). This work will be p