Re: HTTPS Proxy with Apache (Apache Users)

On Thu, Jul 10, 2014 at 6:35 PM, <fabio.schmidt@xxxxxxxxxxxxx> wrote:

Hi !

I'm trying to use Apache 2.2 to proxy connections to a server that only listens with HTTPS (Citrix Secure Gateway, to be more precise) and keep the connection encrypted. I've already enabled the proxy, proxy_http and proxy_connect modules but when I access through my Apache server I got the message "ERR_SSL_PROTOCOL_ERROR".

Why proxy_connect?

Are you trying to perform this common scenario?

client <--- HTTP over SSL/TLS ---> httpd <--- HTTP over SSL/TLS ---> Citrix?

Does the client specify the hostname of httpd AND httpd has a certificate for that hostname?

What am I misunderstanding and if someone could explain to me the correct way to achieve a proxy with a HTTPS>HTTPS connection I would really appreciate !

Here is my configuration:

<VirtualHost *:443>
SSLEngine ON
SSLProxyEngine ON
ProxyPass / https://IP_OF_THE_CITRIX_SERVER/
ProxyPassReverse / https://IP_OF_THE_CITRIX_SERVER/
LogLevel debug
ErrorLog /var/log/apache2/citrix-ssl-error.log
TransferLog /var/log/apache2/citrix-ssl-access.log
</VirtualHost>

Isn't ERR_SSL_PROTOCOL error displayed by Chrome for an error connecting to port 443 (i.e., nothing to do with the backend proxy connection)?

Where's your certificate for client connections to port 443?

This is the only VirtualHost for port 443 in your config, right?

What is in /var/log/apache2/citrix-ssl-error.log when you fail to connect with a browser?

Atenciosamente,
Fabio S. Schmidt
Consultor técnico Sênior
4linux - Open Software Specialists
http://www.4linux.com.br

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx

Born in Roswell... married an alien...
http://emptyhammock.com/