Re: ReverseProxy InvalidUriScheme

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



ServeName can just take host names, not the scheme (http/https), and virtualhost *:* looks to me a very complicatinhg, as in, normally one virtualhost is SSL or not, but not both. So how about trying to go with what's more correct and simple:

<VirtualHost *:80>
    ServerName testsite.dev.auckland.ac.nz

    ProxyPass / http://xxx.xxx.xxx.xxx/
    ProxyPassReverse / http://xxx.xxx.xxx.xxx/
</VirtualHost>

<VirtualHost *:443>
    SSLEngine on
    ServerName testsite.dev.auckland.ac.nz

    ProxyPass / http://xxx.xxx.xxx.xxx/
    ProxyPassReverse / http://xxx.xxx.xxx.xxx/
</VirtualHost>

Or am I missing something?







2016-10-26 11:07 GMT+02:00 Reid Watson <reid.watson@xxxxxxxxxxxxxx>:
Hi Everyone,

I have a small issue when configuring a ReverseProxy and Im wondering if someone has run into this issue before

- Application Innerscope developed in MS silverlight
(iframe content)
- Application does not support HTTPS
(We didn’t write the app in-house this has been provided by vendor)

- We do SSL offloading at the load balancer level before you hit the apache sever

- Proxy Config (very simple)

<VirtualHost *:*>
        <IfDefine DEV>
                ServerName https://testsite.dev.auckland.ac.nz
        </IfDefine>

        RequestHeader set X-Forwarded-Proto http
        RewriteRule .* http://xxx.xxx.xxx.xxx$0 [P,NE,QSA,L]

</VirtualHost>

1. Application Error:

[InvalidUriScheme]
Arguments: https,http
Debugging resource strings are unavailable. Often the key and arguments provide sufficient information to diagnose the problem. See http://go.microsoft.com/fwlink/?linkid=106663&Version=5.1.41212.00&File=System.ServiceModel.dll&Key=InvalidUriScheme
Parameter name: via

2. From testing

- Tested the Virtual Site with HTTP and Reverse Proxy with HTTP — Works as excepted

<VirtualHost *:*>
        <IfDefine DEV>
                ServerName http://testsite.dev.auckland.ac.nz
        </IfDefine>

        RewriteRule .* http://xxx.xxx.xxx.xxx$0 [P,NE,QSA,L]
</VirtualHost>

3. Apache Logs

testsite.dev.auckland.ac.nz: 127.0.0.1 - - [26/Oct/2016:21:36:54 +1300] "GET /Innerscope.xap?ignoreme=%20%20%20%20%201425527793 HTTP/1.1" 200 2400728 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:49.0) Gecko/20100101 Firefox/49.0”

The backend server rejects the request because it requires HTTP not HTTPS

4. Attempted Workarounds / Hack Options - thought I could attempt to fake the Protocol
RequestHeader set X-Forwarded-Proto http

Any thoughts ???



--
Daniel Ferradal
IT Specialist

email         dferradal at gmail.com

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux