Client --http--> Reverse Proxy --intern--> Forward Proxy (ProxyRemote) --https--> Webserver

This is a discussion on Client --http--> Reverse Proxy --intern--> Forward Proxy (ProxyRemote) --https--> Webserver within the Apache Web Server forums, part of the Web Server and Related Forums category; Hello, i'm trying to get the following szenario to work with Apache 2.0.51/OpenSSL 0.9.7d: ...


Go Back   Usenet Forums > Web Server and Related Forums > Apache Web Server

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 12-15-2004
Leif Hanack
 
Posts: n/a
Default Client --http--> Reverse Proxy --intern--> Forward Proxy (ProxyRemote) --https--> Webserver

Hello,

i'm trying to get the following szenario to work with Apache
2.0.51/OpenSSL 0.9.7d:

Client --http--> Reverse Proxy --internal--> Forward Proxy
(ProxyRemote) --https--> Webserver

Ralf Engelschall said: "when you want to forward to a HTTPS target you
need HTTPS support in mod_proxy. That's only possible with mod_ssl
(which enhanced mod_proxy for HTTPS). Then you can do all: Accept
HTTP and HTTPS and connect
to HTTP and HTTPS targets, i.e. create gateways in all combinations."

Is it possible that SSL-forwarding is not working when using
ProxyRemote?

My logs :

[Mon Dec 13 14:14:50 2004] [debug] ssl_engine_io.c(1517): OpenSSL: I/O
error, 7 bytes expected to read on BIO#a55e90 [mem: a5b670]
[Mon Dec 13 14:14:50 2004] [debug] ssl_engine_kernel.c(1793): OpenSSL:
Exit: error in SSLv2/v3 read server hello A
[Mon Dec 13 14:14:50 2004] [info] SSL Proxy connect failed
[Mon Dec 13 14:14:50 2004] [info] Connection to child 1 closed with
abortive shutdown(server 172.16.37.124:80, client 172.16.34.50)
[Mon Dec 13 14:14:50 2004] [error] (20014)Error string not specified
yet: proxy: request failed to 172.16.34.50:3128 (www-cache)

My config :

<VirtualHost serverIP:80>
ServerName intra-xy.com
ServerAdmin mailadmin@example.com
ProxyRequests Off
ProxyRemote * http://proxyIP:3128
SSLProxyEngine on
ProxyPass / https://remoteServerIP/
ProxyPassReverse / https://remoteServerIP/
</VirtualHost>

In a test szenario where i can reach the 'remoteServer' directly
(without a proxy) it is working.

Client --http--> Reverse Proxy --https--> Webserver

Dawn, that the real remoteServer is only via proxy reachable:)

Hope you can help me,
thanks in advance, Leif
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 11:38 AM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0