Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of jslive@gmail.com designates
 64.233.182.191 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=TABDTL2bN1i48QqPsNBUTejUFDljfJ6rijMHZbGXB8vVfL6mfiGfdqxJqjbfVTizJHDOVPTsfN8BrSfzAmtxqdCoRGqS2tm/jLWJsJFg2MfOpYsE8kGstYcMQh0eAB6RRllMpPKPldkipHxFvlghCNfoDR5oh/TSsTMivZ+Pxc4=
Message-ID: <e498c1660805210817p217f8ccdta05c6d8b55bd3386@mail.gmail.com>
Date: Wed, 21 May 2008 11:17:41 -0400
From: "Joshua Slive" <joshua@slive.ca>
Sender: jslive@gmail.com
To: users@httpd.apache.org
In-Reply-To: 
 <96F77944E1BA554D814FBC549EC5D3F00A0A6704@moonraker.campus.ncl.ac.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: 
 <96F77944E1BA554D814FBC549EC5D3F00A0A6704@moonraker.campus.ncl.ac.uk>
Subject: Re: [users@httpd] mod_proxy - "proxy" aware?

On Wed, May 21, 2008 at 10:41 AM, Chris Franks
<chris.franks@newcastle.ac.uk> wrote:
> Hi,
>
> Our webservers sit behind proxy servers.  One one of the web servers,
> I'm trying to use "mod_proxy" to proxy content from outside of our
> network.  Can mod_proxy be made aware of the actual proxy servers we
> have?
>
> I'm trying to proxy secure content over https and have the following in
> my ssl.conf:

> ProxyRemote * https://www.remotesite.com
> ProxyPass /test https://www.remotesite.com/test
> ProxyPassReverse /test https://www.remotesite.com/test

ProxyRemote needs to point to the proxy server, not the final site.

I also have no idea whether this will work with SSL. I guess you are
expecting apache to connect to squid and then issue a CONNECT request
to create a tunnel to www.remotesite.com over which the HTTPS requests
will be made? Sounds like a nightmare. If at all possible, I'd just
blow a hole in your firewall for this particular server and avoid the
two-level proxy.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org