Thank you. On my Apache Reverse Proxy, I have a .conf as below: # cat /etc/httpd/conf.d/reverse_proxy.conf <VirtualHost *:80> ProxyPreserveHost On ProxyPass / http://192.168.56.9/ ProxyPassReverse / http://192.168.56.9/ </VirtualHost> And my website configuration file is on "192.168.56.9" server. Thus, if I setup Let's Encrypt on my Apache Reverse Proxy Server, then I just need below lines in a separate .conf file? <IfModule mod_ssl.c> <VirtualHost *:443> ServerAdmin root@localhost ServerName Example.example ServerAlias www.Example.example ErrorLog /var/log/httpd/error.log CustomLog /var/log/httpd/access.log common SSLEngine On Include /etc/letsencrypt/options-ssl-apache.conf SSLCertificateFile /etc/letsencrypt/live/Example.example/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/Example.example/privkey.pem </VirtualHost> </IfModule> About about self-signed certificate, could above file contain two separate certification? On Monday, April 19, 2021, 02:48:24 PM GMT+4:30, Michael Wechner <michael.wechner@xxxxxxxxx> wrote: Hi Jason Definitely "Apache Reverse Proxy (Public IP)", whereas you could use for example https://letsencrypt.org/ https://certbot.eff.org/ Depending on how your connection between "Apache Reverse Proxy (Public IP) ---> Web Site (Internal IP)" is protected, you might also want to consider a self-signed certificate for "Web Site (Internal IP)" HTH Michael Am 19.04.21 um 12:07 schrieb Jason Long: > Hello, > In below diagram, which server must use HTTPS certification? > > The Internet ---> Apache Reverse Proxy (Public IP) ---> Web Site (Internal IP) > > > Thank you. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|