I have configured haproxy to forward client certificate with
http-request set-header X-SSL-Client-cert %[ssl_c_der,base64]
