Re: [users@httpd] mod_proxy and SSL

Emmanuel E <emmanuel.e@xxxxxxx> · Thu, 18 May 2006 10:18:15 +0530

if youre doing a reverse proxy you probably shouldnt have ProxyRequests On

Sebastian Reitenbach wrote:

Hi,

I have an apache listening for SSL connections on port 443 behind a NAT 

firewall in the DMZ. Connections for one virtual host shall be reverse proxied 

to another host in the same DMZ, but it seems that I am unable to get it to 

work, for me it seems I must have missed sth. obvious.

I tried this with mod_proxy:

SSLProxyEngine On
ProxyRequests On
AllowCONNECT 443
ProxyPass / https://10.0.0.2/
ProxyPassReverse / https://10.0.0.2/

then I receive the following error messages at the proxy:

[Wed May 17 17:07:18 2006] [error] SSL Proxy requested for 

webgis.rapideye.de:80 but not enabled [Hint: SSLProxyEngine]

[Wed May 17 17:07:18 2006] [error] proxy: failed to enable ssl support for 

10.0.0.2:443 (0.0.0.2)

[Wed May 17 17:07:19 2006] [notice] child pid 28242 exit signal Segmentation 

fault (11)

because of the segmentation fault, I am not sure, whether it shall work that 

way or not, but I doubt it.

with the SSLProxyEngine enabled:
SSLProxyEngine On
ProxyRequests On
AllowCONNECT 443
ProxyPass / https://10.0.0.2/
ProxyPassReverse / https://10.0.0.2/

I have this message in the error_log of the proxy:

[Wed May 17 17:09:55 2006] [error] (20014)Error string not specified yet: 

proxy: request failed to 10.10.10.2:443 (10.0.0.2)

[Wed May 17 17:09:55 2006] [error] proxy: HTTP: previous connection is closed

[Wed May 17 17:09:55 2006] [error] (20014)Error string not specified yet: 

proxy: request failed to 10.0.0.2:443 (10.0.0.2)

and this in the error_log of the apache behind the proxy:

[Wed May 17 19:07:17 2006] [error] [client 10.0.0.3] Invalid method in request 

\x80|\x01\x03\x01

[Wed May 17 19:07:17 2006] [error] [client 10.0.0.3] Invalid method in request 

\x80|\x01\x03\x01

with only these in the virtual host of the proxy, it is working, but only 

without HTTPS

ProxyPass / http://10.0.0.2/
ProxyPassReverse / http://10.0.0.2/

Is there any way to access an HTTPS server behind a apache HTTPS proxy?

kind regards
Sebastian

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx