You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Majumdar, Anamitra" <am...@visa.com> on 2005/01/15 04:11:07 UTC
[users@httpd] apache reverse proxy fails with ssl
Hello Group,
I got a problem I seem to be unable to solve on my own.
Layout:
I have a java-based control system running on Tomcat.
I use Apache 2.0.52 as reverse proxy on solaris 10, connection to the java server via mod_proxy (config see below). I need a HTTP connection from the outside to the reverse proxy and HTTPs from the apache proxy to the java server:
When I try to connect to the Tomacat server through the intermediate apache server I get the following error in the logs
+-------+ HTTP +--------+-----------+ SSL +--------+
| I'net | <-----> |mod_proxy | mod_ssl | <------> | Tomcat |
+-------+ +--------|-----------+ +--------+
[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(66): proxy: HTTP: canonicalising URL //10.201.33.80:9443
[Fri Jan 14 18:17:30 2005] [debug] mod_proxy.c(416): Trying to run scheme_handler
[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(1049): proxy: HTTP: serving URL https://10.201.33.80:9443/
[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(185): proxy: HTTP connecting https://10.201.33.80:9443/ to 10.201.33.80:9443
[Fri Jan 14 18:17:30 2005] [debug] proxy_util.c(1138): proxy: HTTP: fam 2 socket created to connect to 10.201.33.80
[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(334): proxy: socket is connected
[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(368): proxy: connection complete to 10.201.33.80:9443 (10.201.33.80)
[Fri Jan 14 18:17:30 2005] [info] Connection to child 2 established (server 10.171.88.90:8080, client 10.201.33.80)
[Fri Jan 14 18:17:30 2005] [info] Seeding PRNG with 136 bytes of entropy
[Fri Jan 14 18:17:30 2005] [notice] child pid 996 exit signal Abort (6)
The page displays a server error
Server Error
The following error occurred:
The server closed the connection while reading the response. Contact your system administrator. (SERVER_RESPONSE_CLOSE)
_____
Please contact the administrator.
The follwoing is the configuration I have been using in httpd.conf
ProxyRequests Off
<Location "/edgeui" >
ProxyPass https://10.201.33.80:9443
ProxyPassReverse https://10.201.33.80:9443
</Location>
SSLProxyEngine on
Help in this matter would be greatly appreciated.
Thanks
Anamitra
X4696
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] apache reverse proxy fails with ssl
Posted by surya <ad...@suryaprabhakar.com>.
Majumdar, Anamitra wrote:
>Hello Group,
>
>I got a problem I seem to be unable to solve on my own.
>Layout:
>I have a java-based control system running on Tomcat.
>I use Apache 2.0.52 as reverse proxy on solaris 10, connection to the java server via mod_proxy (config see below). I need a HTTP connection from the outside to the reverse proxy and HTTPs from the apache proxy to the java server:
>When I try to connect to the Tomacat server through the intermediate apache server I get the following error in the logs
>
>+-------+ HTTP +--------+-----------+ SSL +--------+
>| I'net | <-----> |mod_proxy | mod_ssl | <------> | Tomcat |
>+-------+ +--------|-----------+ +--------+
>
>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(66): proxy: HTTP: canonicalising URL //10.201.33.80:9443
>[Fri Jan 14 18:17:30 2005] [debug] mod_proxy.c(416): Trying to run scheme_handler
>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(1049): proxy: HTTP: serving URL https://10.201.33.80:9443/
>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(185): proxy: HTTP connecting https://10.201.33.80:9443/ to 10.201.33.80:9443
>[Fri Jan 14 18:17:30 2005] [debug] proxy_util.c(1138): proxy: HTTP: fam 2 socket created to connect to 10.201.33.80
>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(334): proxy: socket is connected
>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(368): proxy: connection complete to 10.201.33.80:9443 (10.201.33.80)
>[Fri Jan 14 18:17:30 2005] [info] Connection to child 2 established (server 10.171.88.90:8080, client 10.201.33.80)
>[Fri Jan 14 18:17:30 2005] [info] Seeding PRNG with 136 bytes of entropy
>[Fri Jan 14 18:17:30 2005] [notice] child pid 996 exit signal Abort (6)
>
>The page displays a server error
>
>Server Error
>
>
>The following error occurred:
>
>The server closed the connection while reading the response. Contact your system administrator. (SERVER_RESPONSE_CLOSE)
>
>
> _____
>
>Please contact the administrator.
>
>The follwoing is the configuration I have been using in httpd.conf
>
>ProxyRequests Off
><Location "/edgeui" >
> ProxyPass https://10.201.33.80:9443
> ProxyPassReverse https://10.201.33.80:9443
>
>
I am doubtful about this syntax
I think it should be ProxyPass /name/ /redirection URL/
and same for reverse
I had a similar problem - good information is there in apache docs for 2.0
moreover try commenting out AddDefaultCharset entry in httpd.conf
and try...
></Location>
>SSLProxyEngine on
>
>Help in this matter would be greatly appreciated.
>
>Thanks
>Anamitra
>X4696
>
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
>
>
>
--
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org