their seems to be alot of documentation on apaches proxy module. Yet i was unable to find anything that worked to get a ssl to ssl proxy running.
you can also use this information for a basic proxypass, just ignore anything ssl related
most of the documentation left out one item : SSLProxyEngine on
You [...]
their seems to be alot of documentation on apaches proxy module. Yet i was unable to find anything that worked to get a ssl to ssl proxy running.
you can also use this information for a basic proxypass, just ignore anything ssl related
most of the documentation left out one item : SSLProxyEngine on
You need to enable this option on the ssl virtual host in order to proxy content from your https url to another https url
you’ll also need at least the following, feel free to correct me if a module is a requirement.
mod_proxy.so
mod_proxy_http.so
mod_ssl.so
also you might want to check out : mod_proxy_html
here’s an example apache 2.2.4 vhost config that works for me.
DocumentRoot path/to/files
ServerAdmin admin@inhouse.sid
ErrorLog path/to/log
TransferLog path/to/log
ProxyPass otherserver.sid/path
ProxyPassReverse otherserver.sid/pathSSLProxyEngine on
SSLEngine on
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile path/to/server.crt
SSLCertificateKeyFile path/to/server.key
SSLOptions +StdEnvVars
BrowserMatch “.*MSIE.*” \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0CustomLog path/to/log \
“%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \”%r\” %b”
I should also mention two other options :
ProxyPassReverseCookieDomain
ProxyPassReverseCookiePath
You can find out more about them here :
http://httpd.apache.org/docs/2.2/mod/mod_proxy.html









4 Comments
Thanks, I helped me !
Thanks for this, I had everything but the five lines starting SSL… but kept getting a
proxy: No protocol handler was valid for the URL /mirror/blah. If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule. error.
This is now fixed!
Tanks!, just the directive I missed
But I’m triying someting more complex now. I want to reverse proxy a SSL conection using the client certificate on a server configured with SSL Login + FakeBasicAuth. This is because we are moving mixed login services between servers and we want to keep a stable url space while doing so. Proxying makes basic http login working, but breaks certificate login.
Thanks a ton!
SSLProxyEngine on was all I required.