Re: Tuning TLS of reverse proxy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



El jue, 6 oct 2022 a las 19:06, Will Fatherley
(<wefatherley@xxxxxxxxx>) escribió:
>
> Hi all,
>
> Please let me know if this is not suitable for the user distribution list—
>
> There is an interesting question on stack overflow regarding reverse proxy handling of TLS protocol whereby the user is interested in having httpd (the reverse proxy) tunnel incoming requests to a specific TLS implementation (1.2) so that the resource server behind it (a Tomcat instance) doesn’t have to alter its configuration. I’ve actually never seen a use of mod_ssl for this, so if anybody wants to share on this thread or on SO a sequence of directives that handle this, it would be nice to see and also solve a user’s existing problem. The question is here:
> https://stackoverflow.com/q/73948261/14927325
>
> Best,
> Will

The question has a quite convoluted configuration but it all boils
down to Apache can specify which protocol and cipher it uses to
contact a backend server like in this case the Tomcat. The case, not
mentioned in the question, is, what version of Java does this tomcat
use?
Once you know that it would be easier to guess what the tomcat will
support, you just set SSLProxyProtocol or SSLProxyCipherSuite
directives accordingly then.



-- 
Daniel Ferradal
HTTPD Project
#httpd help at Libera.Chat

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx





[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux