httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Krist van Besien" <krist.vanbes...@gmail.com>
Subject Re: [users@httpd] is it possible ? (ssl-tunneling)
Date Tue, 23 Jan 2007 09:07:37 GMT
On 1/22/07, arry@mail.orbitel.bg <arry@mail.orbitel.bg> wrote:
> Hi,
>
> is it possible to have the connection between the client and the reverse proxy
> encrypted with ssl and authorization basic ? smth like ssh-tunneling ?
>
> example :
>
>            client <---- SSL ---- >  Apache  <-------------> origin server
>                                   reversed
>                                   proxy

Yes. This is even a very common setup.

<VirtualHost *:443>
        ServerName wsecure.foo.com

        SSLEngine on
        SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

        SSLCertificateFile conf/ssl/web.cert
        SSLCertificateKeyFile conf/ssl/server.key
        SSLCertificateChainFile conf/ssl/web.cert


        <Location /app>
                 ProxyPass http://insecure.foo.com/app
                  AuthType Basic
AuthName "By Invitation Only"
AuthUserFile /usr/local/apache/passwd/passwords
AuthGroupFile /usr/local/apache/passwd/groups
Require group GroupName

       </Location>

</VirtualHost>

-- 
krist.vanbesien@gmail.com
Bremgarten b. Bern, Switzerland
--
"...what you don't realize is that in the future Google WILL reach
sentience, will [have had] invent[ed] a time machine, and will [have
had] travel[ed] back in time to prevent Bill Gates... only to become
Bill Gates by accident because of a search engine optimization
miscalculation." (Comment on the Dilbert Blog)

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message