Re: httpd 2.2.3 as an SSL proxy with a client certificate fails on connect

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



reason is "no acceptable CA list", which may mean, that your ReverseProxy dosent trust the CA bound at server:443

read http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslproxycacertificatefile

Regards


The certificate file is fine. When I perform a get operation from the proxy server itself (using a browser), it asks me to present the certificate. Upon presenting it, I can connect successfully.
I'll try to clarify on the architecture here:

We have a client app which does not speak SSL. We have configured a virtual host on the proxy server to (reverse) proxy requests to the SSL-only server, then configured the client certificate.

Client (http) => proxy:8443 (https) => server:443

This configuration worked for a few months, then suddenly stopped working…

Appreciate any help

Shai


> why do you use HTTPS in Backend, it looks like the backend System also
> needs client certificate authentication, there may be something wrong
> with your SSLProxyMachineCertificateFile ? try to send a wget request to
> the remote server and use SSLProxyMachineCertificateFile, dose wget get
> authorized at the remote system ?
>
> regards



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux