I am trying to reverse proxy client certs, here is the config snipit: RequestHeader set Front-End-Https "On" CacheDisable * SSLProxyEngine On ProxyPass /test https://192.168.10.193/test ProxyPassReverse /test https://192.168.10.193/test SSLProxyMachineCertificatePath /var/www.xxxx/certs SSLProxyVerify off Every call to the server for /test results in: [Tue Sep 07 21:59:19 2010] [notice] child pid 24344 exit signal Segmentation fault (11) Fetching https://xxxx/cgi-bin/test.cgi AUTH_TYPE = 'Basic' DOCUMENT_ROOT = '/var/www.xxxx/html' GATEWAY_INTERFACE = 'CGI/1.1' HTTPS = 'on' HTTP_ACCEPT = 'image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, */*' HTTP_ACCEPT_ENCODING = 'gzip, deflate' HTTP_ACCEPT_LANGUAGE = 'en-us' HTTP_CONNECTION = 'Keep-Alive' HTTP_COOKIE = 'ASP.NET_SessionId=fnut3nm4wmsbyc55x5g5tp45' HTTP_FRONT_END_HTTPS = 'On' HTTP_HOST = 'xxxx' HTTP_UA_CPU = 'x86' HTTP_USER_AGENT = 'Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C)' PATH = '/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin' QUERY_STRING = '' REMOTE_ADDR = '16.0.0.0' REMOTE_PORT = '1954' REMOTE_USER = '/C=US/O=U.S. Government/OU=DoD/OU=PKI/OU=CONTRACTOR/CN=PYERON.JASON.J.1291147719' REQUEST_METHOD = 'GET' REQUEST_URI = '/cgi-bin/test.cgi' SCRIPT_FILENAME = '/var/www.xxxx/cgi-bin/test.cgi' SCRIPT_NAME = '/cgi-bin/test.cgi' SERVER_ADDR = 'x.x.x.x' SERVER_ADMIN = 'root@localhost' SERVER_NAME = 'xxxx' SERVER_PORT = '443' SERVER_PROTOCOL = 'HTTP/1.1' SERVER_SIGNATURE = '<address>Apache/2.0.52 (CentOS) Server at xxxx Port 443</address> ' SERVER_SOFTWARE = 'Apache/2.0.52 (CentOS)' SSL_CLIENT_CERT = '-----BEGIN CERTIFICATE----- MIID6DCCA1GgAwIBAgIDCb6dMA0GCSqGSIb3DQEBBQUAMFcxCzAJBgNVBAYTAlVT MRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0RvRDEMMAoGA1UE CxMDUEtJMRIwEAYDVQQDEwlET0QgQ0EtMTUwHhcNMDcxMDE4MDAwMDAwWhcNMTAx MDE0MjM1OTU5WjB8MQswCQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBHb3Zlcm5t ZW50MQwwCgYDVQQLEwNEb0QxDDAKBgNVBAsTA1BLSTETMBEGA1UECxMKQ09OVFJB Q1RPUjEiMCAGA1UEAxMZUFlFUk9OLkpBU09OLkouMTI5MTE0NzcxOTCBnzANBgkq hkiG9w0BAQEFAAOBjQAwgYkCgYEAhMQ+RKYz1XcPripHGnBICeiyzbGarX57ndk/ 6ZRtlk8LW/WsHy3A9t31PsnEIVALPbr75yEVvrn2htQuOdm24D6T5984JDOHchYu WUUyS/W73NCr/Uv3aQ2EyFi9yNdZxuS0dg7GJAXwnYmDAHkMS0o5eAJKVBWb+yuV wiEhSGECAwEAAaOCAZswggGXMA4GA1UdDwEB/wQEAwIGwDAfBgNVHSMEGDAWgBRo gBF4GQ3u7fNlSY4AIuxSjroEzjAdBgNVHQ4EFgQUT9z86adICxztaDTGWVbqxwY2 Ll4wFgYDVR0gBA8wDTALBglghkgBZQIBCwkwgcUGA1UdHwSBvTCBujAsoCqgKIYm aHR0cDovL2NybC5kaXNhLm1pbC9nZXRjcmw/RE9EJTIwQ0EtMTUwgYmggYaggYOG gYBsZGFwOi8vY3JsLmdkcy5kaXNhLm1pbC9jbiUzZERvRCUyMENBLTE1JTJjb3Ul M2RQS0klMmNvdSUzZERvRCUyY28lM2RVLlMuJTIwR292ZXJubWVudCUyY2MlM2RV Uz9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0O2JpbmFyeTBlBggrBgEFBQcBAQRZ MFcwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9jcmwuZGlzYS5taWwvZ2V0c2lnbj9ET0Ql MjBDQS0xNTAgBggrBgEFBQcwAYYUaHR0cDovL29jc3AuZGlzYS5taWwwDQYJKoZI hvcNAQEFBQADgYEAp08dHan3bDsdmG1UJaQzcbFRQwGuyI5JKzTcmjTZ/3lRRsp5 vmPDoAnSbLd0CkG4z7d/OW5JvA9bZSDdC4DS1f9utK8bdCdzlCigfupfNxs+jzvB 3UQDxqUSnC+E7bIc5fnbUD2aKfCkHNYVoHhBgHJt+S19iUcRsxIT8Aj1+70= -----END CERTIFICATE----- ' SSL_SERVER_CERT = '-----BEGIN CERTIFICATE----- XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX -----END CERTIFICATE----- ' downgrade_1_0 = '1' force_response_1_0 = '1' nokeepalive = '1' ssl_unclean_shutdown = '1' -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - - - Jason Pyeron PD Inc. http://www.pdinc.us - - Principal Consultant 10 West 24th Street #100 - - +1 (443) 269-1555 x333 Baltimore, Maryland 21218 - - - -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- This message is copyright PD Inc, subject to license 20080407P00. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|