You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Majumdar, Anamitra" <am...@visa.com> on 2005/01/18 19:41:09 UTC

[users@httpd] RE: apache reverse proxy fails with ssl

> Hello Group,
> I have spent a lot of time on this problem for the past five days. But was not able to resolve.
   I have not received any definitive answer either.
>  
> Layout: 
> I have a java-based control system running on Tomcat. 
> I use Apache 2.0.52 as reverse proxy on solaris 10, connection to the java server via mod_proxy (config see below). I need a HTTP connection from the outside to the reverse proxy and HTTPs  from the apache proxy to the java server: 
> When I try to connect to the Tomacat server through the intermediate apache server I get the following error in the logs
> 
> +-------+   HTTP  +--------+-----------+   SSL    +--------+
> | I'net | <-----> |mod_proxy | mod_ssl | <------> | Tomcat |
> +-------+         +--------|-----------+          +--------+
> 
> [Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(66): proxy: HTTP: canonicalising URL //10.201.33.80:9443
> [Fri Jan 14 18:17:30 2005] [debug] mod_proxy.c(416): Trying to run scheme_handler
> [Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(1049): proxy: HTTP: serving URL https://10.201.33.80:9443/
> [Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(185): proxy: HTTP connecting https://10.201.33.80:9443/ to 10.201.33.80:9443
> [Fri Jan 14 18:17:30 2005] [debug] proxy_util.c(1138): proxy: HTTP: fam 2 socket created to connect to 10.201.33.80
> [Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(334): proxy: socket is connected
> [Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(368): proxy: connection complete to 10.201.33.80:9443 (10.201.33.80)
> [Fri Jan 14 18:17:30 2005] [info] Connection to child 2 established (server 10.171.88.90:8080, client 10.201.33.80)
> [Fri Jan 14 18:17:30 2005] [info] Seeding PRNG with 136 bytes of entropy
> [Fri Jan 14 18:17:30 2005] [notice] child pid 996 exit signal Abort (6)
> 
> The page displays a server error
> 
> Please contact the administrator. 
> 
> The follwoing is the configuration I have been using in httpd.conf 
> 
> ProxyRequests Off
> <Location "/edgeui" >
>   ProxyPass   https://10.201.33.80:9443
>   ProxyPassReverse  https://10.201.33.80:9443
> </Location>
> SSLProxyEngine on
> 
Have anybody had similar problems before 
> Any help in this matter would be greatly appreciated.
> 
> Thanks
> Anamitra
> X4696
> 

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] RE: apache reverse proxy fails with ssl

Posted by surya <ad...@suryaprabhakar.com>.
Try commenting the line AddDefaultCharset UTF-8 in httpd.conf and 
restart apache and  try .


One more thing just check the reverse proxy configuration - I am not 
very sure....

rgds
Surya



Majumdar, Anamitra wrote:

>>Hello Group,
>>I have spent a lot of time on this problem for the past five days. But was not able to resolve.
>>    
>>
>   I have not received any definitive answer either.
>  
>
>> 
>>Layout: 
>>I have a java-based control system running on Tomcat. 
>>I use Apache 2.0.52 as reverse proxy on solaris 10, connection to the java server via mod_proxy (config see below). I need a HTTP connection from the outside to the reverse proxy and HTTPs  from the apache proxy to the java server: 
>>When I try to connect to the Tomacat server through the intermediate apache server I get the following error in the logs
>>
>>+-------+   HTTP  +--------+-----------+   SSL    +--------+
>>| I'net | <-----> |mod_proxy | mod_ssl | <------> | Tomcat |
>>+-------+         +--------|-----------+          +--------+
>>
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(66): proxy: HTTP: canonicalising URL //10.201.33.80:9443
>>[Fri Jan 14 18:17:30 2005] [debug] mod_proxy.c(416): Trying to run scheme_handler
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(1049): proxy: HTTP: serving URL https://10.201.33.80:9443/
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(185): proxy: HTTP connecting https://10.201.33.80:9443/ to 10.201.33.80:9443
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_util.c(1138): proxy: HTTP: fam 2 socket created to connect to 10.201.33.80
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(334): proxy: socket is connected
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(368): proxy: connection complete to 10.201.33.80:9443 (10.201.33.80)
>>[Fri Jan 14 18:17:30 2005] [info] Connection to child 2 established (server 10.171.88.90:8080, client 10.201.33.80)
>>[Fri Jan 14 18:17:30 2005] [info] Seeding PRNG with 136 bytes of entropy
>>[Fri Jan 14 18:17:30 2005] [notice] child pid 996 exit signal Abort (6)
>>
>>The page displays a server error
>>
>>Please contact the administrator. 
>>
>>The follwoing is the configuration I have been using in httpd.conf 
>>
>>ProxyRequests Off
>><Location "/edgeui" >
>>  ProxyPass   https://10.201.33.80:9443
>>  ProxyPassReverse  https://10.201.33.80:9443
>></Location>
>>SSLProxyEngine on
>>
>>    
>>
>Have anybody had similar problems before 
>  
>
>>Any help in this matter would be greatly appreciated.
>>
>>Thanks
>>Anamitra
>>X4696
>>
>>    
>>
>
>---------------------------------------------------------------------
>The official User-To-User support forum of the Apache HTTP Server Project.
>See <URL:http://httpd.apache.org/userslist.html> for more info.
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>   "   from the digest: users-digest-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>
>
>
>
>  
>


-- 


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org