Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (hermes.apache.org: local policy)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Tue, 18 Jan 2005 10:35:38 -0800
Message-ID: <8C53AAFA2050EE40BDCDB9455DA7D6340147D021@sw720ex020.visa.com>
Thread-Topic: [users@httpd] apache reverse proxy fails with ssl
Thread-Index: AcT7q46OluIn4aYHS82vDdizoVDjFAB4L6AA
From: "Majumdar, Anamitra" <amajumda@visa.com>
To: <admin@suryaprabhakar.com>
Cc: <users@httpd.apache.org>
Subject: RE: [users@httpd] apache reverse proxy fails with ssl

THat is what I have done already  as you can see
I pasted the logs in the debug mode.

That does not help much.
At the end I just have an error which says
[Fri Jan 14 18:17:30 2005] [notice] child pid 996 exit signal Abort (6)


Thanks
Anamitra
X4696


-----Original Message-----
From: surya [mailto:admin@suryaprabhakar.com]
Sent: Sunday, January 16, 2005 1:12 AM
To: Majumdar, Anamitra
Cc: users@httpd.apache.org
Subject: Re: [users@httpd] apache reverse proxy fails with ssl


Majumdar, Anamitra wrote:

>Hello,
>
>My config is working fine without https ie, if I have a plain http =
connection=20
>between the proxy server and tomcat app server .
>
>But using similar syntax for https  it is contunually failing.
> =20
>
change the loglevel to debug
do a tail to ssl error log while you are clicking the link and paste it=20
here if you find anything unusual
check the output of other ssl logs also

rgds
surya

>
>Thanks
>Anamitra
>X4696
>
>
>-----Original Message-----
>From: surya [mailto:admin@suryaprabhakar.com]
>Sent: Saturday, January 15, 2005 1:08 AM
>To: users@httpd.apache.org
>Subject: Re: [users@httpd] apache reverse proxy fails with ssl
>
>
>Majumdar, Anamitra wrote:
>
> =20
>
>>Hello Group,
>>
>>I got a problem I seem to be unable to solve on my own.=20
>>Layout:=20
>>I have a java-based control system running on Tomcat.=20
>>I use Apache 2.0.52 as reverse proxy on solaris 10, connection to the =
java server via mod_proxy (config see below). I need a HTTP connection =
from the outside to the reverse proxy and HTTPs  from the apache proxy =
to the java server:=20
>>When I try to connect to the Tomacat server through the intermediate =
apache server I get the following error in the logs
>>
>>+-------+   HTTP  +--------+-----------+   SSL    +--------+
>>| I'net | <-----> |mod_proxy | mod_ssl | <------> | Tomcat |
>>+-------+         +--------|-----------+          +--------+
>>
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(66): proxy: HTTP: =
canonicalising URL //10.201.33.80:9443
>>[Fri Jan 14 18:17:30 2005] [debug] mod_proxy.c(416): Trying to run =
scheme_handler
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(1049): proxy: HTTP: =
serving URL https://10.201.33.80:9443/
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(185): proxy: HTTP =
connecting https://10.201.33.80:9443/ to 10.201.33.80:9443
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_util.c(1138): proxy: HTTP: =
fam 2 socket created to connect to 10.201.33.80
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(334): proxy: socket is =
connected
>>[Fri Jan 14 18:17:30 2005] [debug] proxy_http.c(368): proxy: =
connection complete to 10.201.33.80:9443 (10.201.33.80)
>>[Fri Jan 14 18:17:30 2005] [info] Connection to child 2 established =
(server 10.171.88.90:8080, client 10.201.33.80)
>>[Fri Jan 14 18:17:30 2005] [info] Seeding PRNG with 136 bytes of =
entropy
>>[Fri Jan 14 18:17:30 2005] [notice] child pid 996 exit signal Abort =
(6)
>>
>>The page displays a server error
>>
>>Server Error
>>
>>
>>The following error occurred:
>>
>>The server closed the connection while reading the response. Contact =
your system administrator. (SERVER_RESPONSE_CLOSE)=20
>>
>>
>> _____ =20
>>
>>Please contact the administrator.=20
>>
>>The follwoing is the configuration I have been using in httpd.conf=20
>>
>>ProxyRequests Off
>><Location "/edgeui" >
>> ProxyPass   https://10.201.33.80:9443
>> ProxyPassReverse  https://10.201.33.80:9443
>>=20
>>
>>   =20
>>
>I am doubtful about this syntax
> I think it should be  ProxyPass /name/  /redirection URL/
>and same for reverse
>I had a similar problem - good information is there in apache docs for =
2.0
>moreover try commenting out AddDefaultCharset entry in httpd.conf
>and try...
>
> =20
>
>></Location>
>>SSLProxyEngine on
>>
>>Help in this matter would be greatly appreciated.
>>
>>Thanks
>>Anamitra
>>X4696
>>
>>
>>---------------------------------------------------------------------
>>The official User-To-User support forum of the Apache HTTP Server =
Project.
>>See <URL:http://httpd.apache.org/userslist.html> for more info.
>>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>  "   from the digest: users-digest-unsubscribe@httpd.apache.org
>>For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>>
>>
>>=20
>>
>>   =20
>>
>
>
> =20
>


--=20


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org