You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Qingshan Xie <xi...@yahoo.com> on 2007/08/06 23:44:04 UTC

[users@httpd] How can I do Client-Certificate-Authentication from a reverse proxy to another Apache server?

Hello!  Apache expert, 

   If a Reverse Proxy (RP) talks to another Apache
server(AS),  is there a way to do bidirectional
authentication or Client-Cert-Auth between those two
Apache servers?  It means, the RP needs to send the
client cert to AS for ssl-handshake. Can we do it?

Many Thanks, 
Q.Xie


       
____________________________________________________________________________________
Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more. 
http://mobile.yahoo.com/go?refer=1GNXIC

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] How can I do Client-Certificate-Authentication from a reverse proxy to another Apache server?

Posted by Joshua Slive <jo...@slive.ca>.
On 8/6/07, Qingshan Xie <xi...@yahoo.com> wrote:
> Hello!  Apache expert,
>
>    If a Reverse Proxy (RP) talks to another Apache
> server(AS),  is there a way to do bidirectional
> authentication or Client-Cert-Auth between those two
> Apache servers?  It means, the RP needs to send the
> client cert to AS for ssl-handshake. Can we do it?

I've never done it, but it seems like that is what the SSLProxy...
directives are designed to do. See:
http://httpd.apache.org/docs/2.2/mod/mod_ssl.html

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org