You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@httpd.apache.org by Charles Richard <ch...@gmail.com> on 2012/05/29 20:28:40 UTC

[users@httpd] virtual hosts with different JkExtract ssl values

Hi,

I have a bit of a complex setup in which i need a same front end apache
server to use different virtual hosts name (wildcard SSL) to redirect to
either Liferay, Glassfish or Tomcat.

This could be a misconfiguration on my part but I seem to need for my
regular tomcat server that JkExtractSSL be on and for the other 2 (Liferay,
Glassfish) that my JkExtractSSL be off.  Is there a way to do this in a
virtual host directive? Example:

<virtual host app1.mydomain.com>
JkExtractSSL on
</virtual host>

<virtual host app2.mydomain.com>
JkExtractSSL off
</virtual host>

Thanks,
Charles

Re: [users@httpd] virtual hosts with different JkExtract ssl values

Posted by Charles Richard <ch...@gmail.com>.

Thanks for the help!

As silly as this sounds, I thought i had tried the scenario I had above and
that it hadn't worked but after I read the documentation you sent, it
didn't explicitly specify that JkExtract could not be used in a virtual
host so I tried it and it worked!

Thanks,
Charles

On Tue, May 29, 2012 at 11:36 PM, Igor Cicimov <ic...@gmail.com> wrote:

> JkExtractSSL is On by default. You can read the JkExtractSSL definition
> in the connector documentation:
>
> http://tomcat.apache.org/connectors-doc/reference/printer/apache.html
>
> Looks like you can play with Apache SSLOptions parameter:
>
> "In order to make SSL data available for mod_jk in Apache, you need to set
> *SSLOptions +StdEnvVars*. For the certificate information you also need
> to add *SSLOptions +ExportCertData*. "
>
> and enable the above settings only for the Vhost you need it for.
>
> Igor
>
> On Wed, May 30, 2012 at 4:28 AM, Charles Richard <chachi.richard@gmail.com
> > wrote:
>
>> Hi,
>>
>> I have a bit of a complex setup in which i need a same front end apache
>> server to use different virtual hosts name (wildcard SSL) to redirect to
>> either Liferay, Glassfish or Tomcat.
>>
>> This could be a misconfiguration on my part but I seem to need for my
>> regular tomcat server that JkExtractSSL be on and for the other 2 (Liferay,
>> Glassfish) that my JkExtractSSL be off.  Is there a way to do this in a
>> virtual host directive? Example:
>>
>> <virtual host app1.mydomain.com>
>> JkExtractSSL on
>> </virtual host>
>>
>> <virtual host app2.mydomain.com>
>> JkExtractSSL off
>> </virtual host>
>>
>> Thanks,
>> Charles
>>
>
>

Re: [users@httpd] virtual hosts with different JkExtract ssl values

Posted by Igor Cicimov <ic...@gmail.com>.

JkExtractSSL is On by default. You can read the JkExtractSSL definition in
the connector documentation:

http://tomcat.apache.org/connectors-doc/reference/printer/apache.html

Looks like you can play with Apache SSLOptions parameter:

"In order to make SSL data available for mod_jk in Apache, you need to
set *SSLOptions
+StdEnvVars*. For the certificate information you also need to add *SSLOptions
+ExportCertData*. "

and enable the above settings only for the Vhost you need it for.

Igor

On Wed, May 30, 2012 at 4:28 AM, Charles Richard
<ch...@gmail.com>wrote:

> Hi,
>
> I have a bit of a complex setup in which i need a same front end apache
> server to use different virtual hosts name (wildcard SSL) to redirect to
> either Liferay, Glassfish or Tomcat.
>
> This could be a misconfiguration on my part but I seem to need for my
> regular tomcat server that JkExtractSSL be on and for the other 2 (Liferay,
> Glassfish) that my JkExtractSSL be off.  Is there a way to do this in a
> virtual host directive? Example:
>
> <virtual host app1.mydomain.com>
> JkExtractSSL on
> </virtual host>
>
> <virtual host app2.mydomain.com>
> JkExtractSSL off
> </virtual host>
>
> Thanks,
> Charles
>