RE: Apache Reverse Proxy Server Accessing backend https through front https server

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi, Igov

 

I tried that. In httpd-vhosts.conf, change to:

 

<Virtualhost>

            ServerName sitename

            Redirect /          https://sitename/

</Virtualhost>

 

In httpd-ssl.conf:

 

<Virtualhost>

            …

            ProxyPass        /dir1/dir2/login    https://backend/

            Redirect            /                       https://sitename/dir1/dir2/login

            ProxyPassReverse         /           https://backend/

</Virtualhost>

 

It is the same result with or without trailing “/” at https://backend.

 

 From the log, I saw http traffic redirected to https but afterwards got 403 error code for https traffic.

 

GET / HTTP/1.1 302 245

GET /dir1/dir2/login HTTP/1.1 403

 

On the backend server, the log is “directory listing forbidden”.

 

 The backend server seems to have the subdirectories in the URL.

 

Ryan

 

 


From: Igor Cicimov [mailto:icicimov@xxxxxxxxx]
Sent: Friday, April 01, 2011 10:33 PM
To: users@xxxxxxxxxxxxxxxx
Subject: Re: Apache Reverse Proxy Server Accessing backend https through front https server

 

What if you change
Redirect / https://backend/
to
Redirect / https://sitename/

On Apr 2, 2011 5:56 AM, "Ruiyuan Jiang" <Ruiyuan_Jiang@xxxxxxx> wrote:

Hi, all

I have a Apache reverse proxy server (v2.2.17). There is a web server with backend https server. When internet users access the sit, they use http://sitename and then get redirected to https://sitename. The configuration is in the httpd-vhosts.conf

<Virtualhost sitename:80>
       ServerName      sitename
       Redirect /      https://sitename/dir1/dir2/login
</Virtualhost>

In my httpd-ssl.conf, for the same site I have:

<Virtualhost sitename:443>
       ServerName      sitename
       SSLEngine on
       SSLProxyEngine on
       ....
       Proxypass /             https://backend/
       ProxyPassReverse /      https://backend/
</Virtualhost>


Now I get a new request that when the internet users use https://sitename besides http://sitename, users should be able to access the site too.

I modified the virtual server in httpd-vhosts.conf:

<Virtualhost sitename:80>
       ServerName      sitename
       Redirect /      https://backend/
</Virtualhost>

In httpd-ssl.conf:

<Virtualhost sitename:443>
       ServerName sitename
       SSLEngine on
       SSLProxyEngine on
       ...
       Proxypass /             https://backend/ dir1/dir2/login
       ProxyPassReverse /      https://backend/ dir1/dir2/login
</Virtualhost>

When I accessed the site through either http or https, I saw in error log:

GET /   HTTP/1.1" 302 178
GET /dir1/dir2/login HTTP/1.1" 404 -


On my IE browser, when I accessed the site through http and https, I saw the same message:

The error (HTTP 404 Not Found) was able to connect to the website, but the page you wanted was not found.

Thanks.

Ryan Jiang



This message (including any attachments) is intended
solely for the specific individual(s) or entity(ies) named
above, and may contain legally privileged and
confidential information. If you are not the intended
recipient, please notify the sender immediately by
replying to this message and then delete it.
Any disclosure, copying, or distribution of this message,
or the taking of any action based on it, by other than the
intended recipient, is strictly prohibited.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx




This message (including any attachments) is intended
solely for the specific individual(s) or entity(ies) named
above, and may contain legally privileged and
confidential information. If you are not the intended
recipient, please notify the sender immediately by
replying to this message and then delete it.
Any disclosure, copying, or distribution of this message,
or the taking of any action based on it, by other than the
intended recipient, is strictly prohibited.

[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux