general/9605: Apache MOD_SSL over NAT not working

[Jim Lee <ji...@hotmail.com>]

>Number:         9605
>Category:       general
>Synopsis:       Apache MOD_SSL over NAT not working
>Confidential:   no
>Severity:       critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Sat Jan 26 08:00:00 PST 2002
>Closed-Date:
>Last-Modified:
>Originator:     jimlee2@hotmail.com
>Release:        1.3.2
>Organization:
apache
>Environment:
Windows 2000 server
>Description:
We have an apache server with mod_ssl.

The SSL connection works fine within out network(intranet).

But from outside(internet), users reach the apache server through NAT. They are able to see the http page but are not able to see https page. 

The apache server's ip address is not visible to outside users since the NAT does the network address translation. The external users use an external ip address which is redirected to apache ip address by NAT.

The following Virtual Host directive is used in the apache httpd.conf

SSLMutex sem
SSLRandomSeed startup builtin
SSLSessionCache none

<VirtualHost apache.server.ip.address:443>
SSLEngine On
SSLCertificateFile conf/ssl/apache-server.cert
SSLCertificateKeyFile conf/ssl/apache-server.key
</VirtualHost>

Any help would be highly appreciated
>How-To-Repeat:

>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted:
 [In order for any reply to be added to the PR database, you need]
 [to include <ap...@Apache.Org> in the Cc line and make sure the]
 [subject line starts with the report component and number, with ]
 [or without any 'Re:' prefixes (such as "general/1098:" or      ]
 ["Re: general/1098:").  If the subject doesn't match this       ]
 [pattern, your message will be misfiled and ignored.  The       ]
 ["apbugs" address is not added to the Cc line of messages from  ]
 [the database automatically because of the potential for mail   ]
 [loops.  If you do not include this Cc, your reply may be ig-   ]
 [nored unless you are responding to an explicit request from a  ]
 [developer.  Reply only with text; DO NOT SEND ATTACHMENTS!     ]