You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Rose, John B" <jb...@utk.edu> on 2015/05/12 16:40:33 UTC
[users@httpd] SSL not working for ServerAlias through load balancer
Red Hat 7 Apache 2.4
We are using name based virtual hosts SSL configuration.
Which is working except not for one of our ServerAlias that goes thru a load balancer
Not using SSL works fine. We can access all these via the browser ...
http://baseserver.sub.abc.com
http://first.sub.abc.com
http://first.abc.com
Using SSL we can go to these successfully ...
https://baseserver.sub.abc.com
https://First.sub.abc.com
But not this ...
https://first.abc.com
Here is our config ...
Have tried these ..
<VirtualHost *.443>
and
<VirtualHost first.sub.abc.com:443>
and
<VirtualHost first.abc.com:443>
ServerName baseserver.sub.abc.com
ServerAlias first.sub.abc.com
ServerAlias first.abc.com
SSLEngine on
DocumentRoot "/www/docs"
<Directory "/www/docs">
...
</Directory>
ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/www/docs/
DirectoryIndex index.php index.html
SSL Certificate stuff ...
</VirtualHost>
Any suggestions why the Load Balanced SSL ServerAlias. https://first.abc.com, is not working?
Thanks
Re: [users@httpd] SSL not working for ServerAlias through load
balancer
Posted by "Rose, John B" <jb...@utk.edu>.
In Firefox we get the spinning "ConnectingŠ" indicator in the tab, and it
never advances any further.
On 5/12/15 11:27 AM, "Rich Bowen" <rb...@rcbowen.com> wrote:
>
>
>On 05/12/2015 10:40 AM, Rose, John B wrote:
>> Red Hat 7 Apache 2.4
>>
>> We are using name based virtual hosts SSL configuration.
>>
>> Which is working except not for one of our ServerAlias that goes thru a
>> load balancer
>>
>> Not using SSL works fine. We can access all these via the browser Š
>>
>> http://baseserver.sub.abc.com
>> http://first.sub.abc.com
>> http://first.abc.com
>>
>> Using SSL we can go to these successfully Š
>>
>> https://baseserver.sub.abc.com
>> https://First.sub.abc.com
>>
>> But not this Š
>>
>> https://first.abc.com
>>
>> Here is our config Š
>>
>> Have tried these ..
>> <VirtualHost *.443>
>> and
>> <VirtualHost first.sub.abc.com:443>
>> and
>> <VirtualHost first.abc.com:443>
>>
>> ServerName baseserver.sub.abc.com
>> ServerAlias first.sub.abc.com
>> ServerAlias first.abc.com
>>
>> SSLEngine on
>> DocumentRoot "/www/docs"
>>
>> <Directory "/www/docs">
>> Š
>> </Directory>
>>
>>
>> ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/www/docs/
>> DirectoryIndex index.php index.html
>>
>> SSL Certificate stuff Š
>>
>> </VirtualHost>
>>
>>
>> Any suggestions why the Load Balanced SSL ServerAlias.
>> https://first.abc.com, is not working?
>
>Can you elaborate on "not working"? What exactly happens?
>
>
>--
>Rich Bowen - rbowen@rcbowen.com - @rbowen
>http://apachecon.com/ - @apachecon
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL not working for ServerAlias through load balancer
Posted by Rich Bowen <rb...@rcbowen.com>.
On 05/12/2015 10:40 AM, Rose, John B wrote:
> Red Hat 7 Apache 2.4
>
> We are using name based virtual hosts SSL configuration.
>
> Which is working except not for one of our ServerAlias that goes thru a
> load balancer
>
> Not using SSL works fine. We can access all these via the browser …
>
> http://baseserver.sub.abc.com
> http://first.sub.abc.com
> http://first.abc.com
>
> Using SSL we can go to these successfully …
>
> https://baseserver.sub.abc.com
> https://First.sub.abc.com
>
> But not this …
>
> https://first.abc.com
>
> Here is our config …
>
> Have tried these ..
> <VirtualHost *.443>
> and
> <VirtualHost first.sub.abc.com:443>
> and
> <VirtualHost first.abc.com:443>
>
> ServerName baseserver.sub.abc.com
> ServerAlias first.sub.abc.com
> ServerAlias first.abc.com
>
> SSLEngine on
> DocumentRoot "/www/docs"
>
> <Directory "/www/docs">
> …
> </Directory>
>
>
> ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/www/docs/
> DirectoryIndex index.php index.html
>
> SSL Certificate stuff …
>
> </VirtualHost>
>
>
> Any suggestions why the Load Balanced SSL ServerAlias.
> https://first.abc.com, is not working?
Can you elaborate on "not working"? What exactly happens?
--
Rich Bowen - rbowen@rcbowen.com - @rbowen
http://apachecon.com/ - @apachecon
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL not working for ServerAlias through load
balancer
Posted by "Rose, John B" <jb...@utk.edu>.
I may should have worded that we have tried each one of these
individually. Not all at the same time.
Have tried these ..
<VirtualHost *.443>
and
<VirtualHost first.sub.abc.com:443>
and
<VirtualHost first.abc.com:443>
On 5/12/15 5:37 PM, "Eric Covener" <co...@gmail.com> wrote:
>On Tue, May 12, 2015 at 10:40 AM, Rose, John B <jb...@utk.edu> wrote:
>> <VirtualHost first.sub.abc.com:443>
>> and
>> <VirtualHost first.abc.com:443>
>
>
>Try using *:443 in the VirtualHost tag exclusively?
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] SSL not working for ServerAlias through load balancer
Posted by Eric Covener <co...@gmail.com>.
On Tue, May 12, 2015 at 10:40 AM, Rose, John B <jb...@utk.edu> wrote:
> <VirtualHost first.sub.abc.com:443>
> and
> <VirtualHost first.abc.com:443>
Try using *:443 in the VirtualHost tag exclusively?
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org