Re: SSL Proxy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Nov 4, 2008 at 7:02 PM, Florian Lindner <mailinglists@xxxxxx> wrote:
> Hello,
>
> I have an SSL certificate of www.example.org. Now I want to proxy another
> domain (which is a v-host on the same server) through the beforementioned
> SSL domain.
>
> My first try was: (in the doc root .htaccess)
>
> RewriteCond %{HTTP_HOST} ^.*ssl\.example\.org$
> RewriteRule ^(.*)$ http://target.com/$1 [L,P]
>
> This works but the certificate is not valid for ssl.example.org only for
> www. thus the browser raise an error.
>
> Second try: (in a sub dir named proxy .htaccess)
>
> RewriteRule ^(.*)$ http://target.com/$1 [P,L]
>
> There raises the problem that the application on target.com perfoms an
> redirection to /foo/bar/ (mind the first slash) with proxy that makes
> example.org/foo/bar/ which raises an 404. example.org/proxy/foo/bar/ would
> be fine.
>
> How can I get around these problems?

You cannot get around the problem caused by an SSL certificate not
matching the hostname of your server. So you will have to use
www.example.com for your servername. 8BTW, there is no reason why you
couldn't have both an http and an https server with the same
servername, if that is the reason why your first atempt was with
ssl.example.com)

However, if both machines are a vhost on the same server, why not make
it easy: Make the ssl server use the same docroot as the none ssl
server...


Krist


-- 
krist.vanbesien@xxxxxxxxx
krist@xxxxxxxxxxxxx
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux