Re: SSL proxy issues

Re: SSL proxy issues

am 27.05.2008 11:19:33 von lwhelan

This is a multi-part message in MIME format.

------_=_NextPart_001_01C8BFDA.C6A527A7
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi, first time mailer but hoping for some good advice from experienced
users.
=20
Basically Im looking to implement a solution that will redirect SSL
requests coming into my apache server (listening on 443) and forward
them on to a backend server.
I have reverse proxying setup but I cant seem to get it to work for
https connections.
=20
At the moment using the current configuration, below, an http connection
coming into the server on port 80 can be redirected to the https site
configured.
=20
But when I click on a login button on that site Im just getting a blank
screen on Firefox, with no errors showing in the logs?
=20
Has anyone any ideas, cause Ive been looking into this for hours now?
=20
Listen 8080

Listen 443

ServerName F00311.eircom.ie



SSLRandomSeed startup builtin

SSLRandomSeed connect builtin



SSLProxyEngine on

ProxyPass / https://www.365online.com/

ProxyPassReverse / https://www.365online.com/

=20

SSLSessionCache "shmcb:d:/Apache2.2/logs/ssl_scache(512000)"

SSLSessionCacheTimeout 300



SSLEngine On

SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL

SSLCertificateKeyFile "D:\Apache2.2\conf\security\ca.key"

SSLCertificateFile "D:\Apache2.2\conf\security\ca.crt"

ServerName F00311.eircom.ie

SSLProxyEngine on

ProxyPass / https://www.365online.com/

ProxyPassReverse / https://www.365online.com/

SSLProxyVerify none

SSLProxyProtocol all

SSLProxyCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL



=20


************************************************************ ***
The information contained in this e-mail and any files transmitted=20
with it is confidential and may be subject to legal professional=20
privilege. It is intended solely for the use of the addressee(s).=20
If you are not the intended recipient of this e-mail, please note=20
that any review, dissemination, disclosure, alteration, printing,=20
copying or transmission of this e-mail and/or any file transmitted=20
with it, is prohibited and may be unlawful.=20
If you have received this e-mail by mistake, please promptly=20
inform the sender by reply e-mail and delete the material.=20
Whilst this e-mail message has been swept for the presence of=20
computer viruses, eircom does not, except as required by law,=20
represent, warrant and/or guarantee that the integrity=20
of this communication has been maintained nor that=20
the communication is free of errors, viruses, interception or=20
interference.=20

eircom Limited. Private Company Limited by Shares.=20
Registered in Dublin. Registration Number 98789.
Registered Office - 114 St. Stephen's Green West, Dublin 2.
************************************************************ ***

------_=_NextPart_001_01C8BFDA.C6A527A7
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable






Hi, first=
time=20
mailer but hoping for some good advice from experienced=20
users.

class=3D453191309-27052008> 

Basically=
Im looking=20
to implement a solution that will redirect SSL requests coming into my apac=
he=20
server (listening on 443) and forward them on to a backend=20
server.

I have re=
verse=20
proxying setup but I cant seem to get it to work for https=20
connections.

class=3D453191309-27052008> 

At the mo=
ment using=20
the current configuration, below, an http connection coming into the server=
on=20
port 80 can be redirected to the https site configured.

class=3D453191309-27052008> 

But when =
I click on=20
a login button on that site Im just getting a blank screen on Firefox, with=
no=20
errors showing in the logs?

class=3D453191309-27052008> 

Has anyon=
e any=20
ideas, cause Ive been looking into this for hours now?

class=3D453191309-27052008> 

e=3D2>

Listen 8080


Listen 443


ServerName F00311.eircom.ie


<IfModule ssl_module>


SSLRandomSeed startup builtin


SSLRandomSeed connect builtin


</IfModule>


SSLProxyEngine on


ProxyPass / https://www.365online.com/


ProxyPassReverse /=20
https://www.365online.com/


 


SSLSessionCache=20
"shmcb:d:/Apache2.2/logs/ssl_scache(512000)"


SSLSessionCacheTimeout 300


<VirtualHost F00311.eircom.ie:443><=
/P>

SSLEngine On


SSLCipherSuite=20
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL
>


SSLCertificateKeyFile=20
"D:\Apache2.2\conf\security\ca.key"


SSLCertificateFile=20
"D:\Apache2.2\conf\security\ca.crt"


ServerName F00311.eircom.ie


SSLProxyEngine on


ProxyPass / https://www.365online.com/


ProxyPassReverse /=20
https://www.365online.com/


SSLProxyVerify none


SSLProxyProtocol all


SSLProxyCipherSuite=20
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL
>


size=3D1></VirtualHost>


class=3D453191309-27052008> 


***************************************************************
The information contained in this e-mail and any files transmitted=20
with it is confidential and may be subject to legal professional=20
privilege. It is intended solely for the use of the addressee(s).=20
If you are not the intended recipient of this e-mail, please note=20
that any review, dissemination, disclosure, alteration, printing,=20
copying or transmission of this e-mail and/or any file transmitted=20
with it, is prohibited and may be unlawful.=20
If you have received this e-mail by mistake, please promptly=20
inform the sender by reply e-mail and delete the material.=20
Whilst this e-mail message has been swept for the presence of=20
computer viruses, eircom does not, except as required by law,=20
represent, warrant and/or guarantee that the integrity=20
of this communication has been maintained nor that=20
the communication is free of errors, viruses, interception or=20
interference.=20

eircom Limited. Private Company Limited by Shares.=20
Registered in Dublin. Registration Number 98789.
Registered Office - 114 St. Stephen's Green West, Dublin 2.
***************************************************************


------_=_NextPart_001_01C8BFDA.C6A527A7--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org