Greeting
I'm having a problem with Apache-SSL reverse proxy to a backend server.
In the error log, it shows multiple of these messages:
[Tue Aug 19 16:07:57 2008] [error] (20014)Error string not specified
yet: proxy: pass request body failed to xxx.xxx.xxx.xxx:8080
(yyy.yyy.com)
[Tue Aug 19 16:07:57 2008] [error] (20014)Error string not specified
yet: proxy: pass request body failed to xxx.xxx.xxx.xxx:8080
(yyy.yyy.com) from <IP address> ()
Here is the snippet of conf:
<VirtualHost zzz.zzz.zzz.zzz:443>
DocumentRoot "/zzz"
ServerName yyy.yyy.com
Options None
SSLProxyEngine on
ProxyRequests Off
ProxyVia On
ProxyPass / https://xxx.xxx.xxx.xxx:8080/
ProxyPassReverse / https://xxx.xxx.xxx.xxx:8080/
SetEnv force-proxy-request-1.0 1
SetEnv proxy-nokeepalive 1
SSLEngine on
SSLProtocol all -TLSv1
SSLCipherSuite ALL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/ssl.crt/zzz.cert.pem
SSLCertificateKeyFile /etc/ssl.key/zzz.key.pem
SSLCertificateChainFile /etc/ssl.crt/ca.cert.pem
SSLCACertificateFile /etc/ssl.crt/ca.cert.pem
SSLVerifyDepth 1
SSLVerifyClient require
SSLOptions +FakeBasicAuth
SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
<Proxy *>
SSLRequireSSL
SSLRequire %{SSL_CLIENT_I_DN_CN} eq "..." \
and %{SSL_CLIENT_S_DN_CN} eq "..."
Order Allow,Deny
Allow from all
</Proxy>
</VirtualHost>
The problem seems happening intermittently and "kill -1 <pid>" seems resolving
the problem temporarily.
Has anyone came across this problem before?
Appreciate for all comments and help.
cheers,
myocella
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|