Skip to Content About Archive Belief Contact Pudding Search


how to: get apache proxypass working with ssl


Friday, August 31, 2007

If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!

their seems to be alot of documentation on apaches proxy module. Yet i was unable to find anything that worked to get a ssl to ssl proxy running.

you can also use this information for a basic proxypass, just ignore anything ssl related

most of the documentation left out one item : SSLProxyEngine on

You need to enable this option on the ssl virtual host in order to proxy content from your https url to another https url

you’ll also need at least the following, feel free to correct me if a module is a requirement.

mod_proxy.so
mod_proxy_http.so
mod_ssl.so

also you might want to check out : mod_proxy_html

here’s an example apache 2.2.4 vhost config that works for me.


DocumentRoot path/to/files
ServerAdmin admin@inhouse.sid
ErrorLog path/to/log
TransferLog path/to/log

ProxyPass otherserver.sid/path
ProxyPassReverse otherserver.sid/path

SSLProxyEngine on
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile path/to/server.crt
SSLCertificateKeyFile path/to/server.key


SSLOptions +StdEnvVars

BrowserMatch “.*MSIE.*” \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

CustomLog path/to/log \
“%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \”%r\” %b”

I should also mention two other options :
ProxyPassReverseCookieDomain
ProxyPassReverseCookiePath

You can find out more about them here :
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html

If your using windows you can download apache modules here

Share and Enjoy:
  • Digg
  • Sphinn
  • del.icio.us
  • Facebook
  • Mixx
  • Google
Might Be Related

4 Responses to “how to: get apache proxypass working with ssl”


  1. Arun Says:

    Thanks, I helped me !

  2. Scouse_down_under Says:

    Thanks for this, I had everything but the five lines starting SSL… but kept getting a
    proxy: No protocol handler was valid for the URL /mirror/blah. If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule. error.

    This is now fixed!

  3. theist Says:

    Tanks!, just the directive I missed :P

    But I’m triying someting more complex now. I want to reverse proxy a SSL conection using the client certificate on a server configured with SSL Login + FakeBasicAuth. This is because we are moving mixed login services between servers and we want to keep a stable url space while doing so. Proxying makes basic http login working, but breaks certificate login.

  4. Nag Says:

    Thanks a ton!
    SSLProxyEngine on was all I required.

Leave a Reply


In order to submit a comment, you need to mention your name and your email address (which won't be published). And ... don't forget your comment!

Comment Form