Re: SSL not working for ServerAlias through load balancer

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Yann

All efforts appreciated.

First.abc.com goes thru a load balancer

http://first.abc.com

Works fine. 

https://first.abc.com

does not

If I understand your question correctly.

John



On 5/12/15 3:40 PM, "Yann Ylavic" <ylavic.dev@xxxxxxxxx> wrote:

>Probably a silly question, but, is first.abc.com accessible (dns,
>route, ...) from the client host?
>
>Regards,
>Yann.
>
>On Tue, May 12, 2015 at 9:12 PM, Rose, John B <jbrose@xxxxxxx> wrote:
>> We gave that a try based on your recommendation, but it did not change
>>the
>> result.
>>
>> We are still looking for an answer.
>>
>> Thanks
>>
>> On 5/12/15 12:03 PM, "Jack Swan" <john.swan@xxxxxxxxxx> wrote:
>>
>>>
>>>Occasionally we've had the spinning connecting problem here during some
>>>of our development.
>>>You might try clearing/deleting any certificates for that particular
>>>host
>>>in Firefox.
>>>
>>>Tools->Options - Advanced.  Select View Certificates and delete/distruct
>>>the certs for that host.
>>>
>>>Maybe that'll work.  It did for us.
>>>
>>>----- Original Message -----
>>>From: jbrose@xxxxxxx
>>>To: users@xxxxxxxxxxxxxxxx
>>>Sent: Tuesday, May 12, 2015 11:47:24 AM GMT -05:00 US/Canada Eastern
>>>Subject: Re:  SSL not working for ServerAlias through load
>>>balancer
>>>
>>>In Firefox we get the spinning "ConnectingŠ" indicator in the tab, and
>>>it
>>>never advances any further.
>>>
>>>On 5/12/15 11:27 AM, "Rich Bowen" <rbowen@xxxxxxxxxxx> wrote:
>>>
>>>>
>>>>
>>>>On 05/12/2015 10:40 AM, Rose, John B wrote:
>>>>> Red Hat 7 Apache 2.4
>>>>>
>>>>> We are using name based virtual hosts SSL configuration.
>>>>>
>>>>> Which is working except not for one of our ServerAlias that goes
>>>>>thru a
>>>>> load balancer
>>>>>
>>>>> Not using SSL works fine. We can access all these via the browser Š
>>>>>
>>>>> http://baseserver.sub.abc.com
>>>>> http://first.sub.abc.com
>>>>> http://first.abc.com
>>>>>
>>>>> Using SSL we can go to these successfully Š
>>>>>
>>>>> https://baseserver.sub.abc.com
>>>>> https://First.sub.abc.com
>>>>>
>>>>> But not this Š
>>>>>
>>>>> https://first.abc.com
>>>>>
>>>>> Here is our config Š
>>>>>
>>>>> Have tried these ..
>>>>> <VirtualHost *.443>
>>>>>        and
>>>>> <VirtualHost first.sub.abc.com:443>
>>>>>        and
>>>>> <VirtualHost first.abc.com:443>
>>>>>
>>>>>      ServerName baseserver.sub.abc.com
>>>>>      ServerAlias first.sub.abc.com
>>>>>      ServerAlias first.abc.com
>>>>>
>>>>>      SSLEngine on
>>>>>      DocumentRoot "/www/docs"
>>>>>
>>>>>    <Directory "/www/docs">
>>>>>      Š
>>>>>    </Directory>
>>>>>
>>>>>
>>>>>    ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/www/docs/
>>>>>    DirectoryIndex index.php index.html
>>>>>
>>>>> SSL Certificate stuff Š
>>>>>
>>>>> </VirtualHost>
>>>>>
>>>>>
>>>>> Any suggestions why the Load Balanced  SSL ServerAlias.
>>>>> https://first.abc.com,  is not working?
>>>>
>>>>Can you elaborate on "not working"? What exactly happens?
>>>>
>>>>
>>>>--
>>>>Rich Bowen - rbowen@xxxxxxxxxxx - @rbowen
>>>>http://apachecon.com/ - @apachecon
>>>>
>>>>---------------------------------------------------------------------
>>>>To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>>>For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>>
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>>For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>>For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx






[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux