Re: ReverseProxy InvalidUriScheme

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Daniel 

I have been testing your proposed solutions 

- <VirtualHost *:80> configuration works correctly 
- <VirtualHost *:443> I receive InvalidUriScheme error message 

I believe backend checks the protocol, problem is I don't have access to the backend application — I will have a chat to the vendor 

I thought I could fake Protocol to the backend server but I’m making assumptions without understanding the application in more details  

RequestHeader set X-Forwarded-Proto

Cheers

Reid 

> On 28/10/2016, at 5:45 am, Daniel <dferradal@xxxxxxxxx> wrote:
> 
> ServeName can just take host names, not the scheme (http/https), and virtualhost *:* looks to me a very complicatinhg, as in, normally one virtualhost is SSL or not, but not both. So how about trying to go with what's more correct and simple:
> 
> <VirtualHost *:80>
>     ServerName testsite.dev.auckland.ac.nz
> 
>     ProxyPass / http://xxx.xxx.xxx.xxx/
>     ProxyPassReverse / http://xxx.xxx.xxx.xxx/
> </VirtualHost>
> 
> <VirtualHost *:443>
>     SSLEngine on
>     ServerName testsite.dev.auckland.ac.nz
> 
>     ProxyPass / http://xxx.xxx.xxx.xxx/
>     ProxyPassReverse / http://xxx.xxx.xxx.xxx/
> </VirtualHost>
> 
> Or am I missing something?
> 
> 
> 
> 
> 
> 
> 
> 2016-10-26 11:07 GMT+02:00 Reid Watson <reid.watson@xxxxxxxxxxxxxx>:
> Hi Everyone,
> 
> I have a small issue when configuring a ReverseProxy and Im wondering if someone has run into this issue before
> 
> - Application Innerscope developed in MS silverlight
> (iframe content)
> - Application does not support HTTPS
> (We didn’t write the app in-house this has been provided by vendor)
> 
> - We do SSL offloading at the load balancer level before you hit the apache sever
> 
> - Proxy Config (very simple)
> 
> <VirtualHost *:*>
>         <IfDefine DEV>
>                 ServerName https://testsite.dev.auckland.ac.nz
>         </IfDefine>
> 
>         RequestHeader set X-Forwarded-Proto http
>         RewriteRule .* http://xxx.xxx.xxx.xxx$0 [P,NE,QSA,L]
> 
> </VirtualHost>
> 
> 1. Application Error:
> 
> [InvalidUriScheme]
> Arguments: https,http
> Debugging resource strings are unavailable. Often the key and arguments provide sufficient information to diagnose the problem. See http://go.microsoft.com/fwlink/?linkid=106663&Version=5.1.41212.00&File=System.ServiceModel.dll&Key=InvalidUriScheme
> Parameter name: via
> 
> 2. From testing
> 
> - Tested the Virtual Site with HTTP and Reverse Proxy with HTTP — Works as excepted
> 
> <VirtualHost *:*>
>         <IfDefine DEV>
>                 ServerName http://testsite.dev.auckland.ac.nz
>         </IfDefine>
> 
>         RewriteRule .* http://xxx.xxx.xxx.xxx$0 [P,NE,QSA,L]
> </VirtualHost>
> 
> 3. Apache Logs
> 
> testsite.dev.auckland.ac.nz: 127.0.0.1 - - [26/Oct/2016:21:36:54 +1300] "GET /Innerscope.xap?ignoreme=%20%20%20%20%201425527793 HTTP/1.1" 200 2400728 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:49.0) Gecko/20100101 Firefox/49.0”
> 
> The backend server rejects the request because it requires HTTP not HTTPS
> 
> 4. Attempted Workarounds / Hack Options - thought I could attempt to fake the Protocol
> RequestHeader set X-Forwarded-Proto http
> 
> Any thoughts ???
> 
> 
> 
> -- 
> Daniel Ferradal
> IT Specialist
> 
> email         dferradal at gmail.com
> linkedin     es.linkedin.com/in/danielferradal


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux