httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Krist van Besien" <krist.vanbes...@gmail.com>
Subject Re: [users@httpd] SSL Proxy
Date Wed, 05 Nov 2008 14:18:14 GMT
On Tue, Nov 4, 2008 at 7:02 PM, Florian Lindner <mailinglists@xgm.de> wrote:
> Hello,
>
> I have an SSL certificate of www.example.org. Now I want to proxy another
> domain (which is a v-host on the same server) through the beforementioned
> SSL domain.
>
> My first try was: (in the doc root .htaccess)
>
> RewriteCond %{HTTP_HOST} ^.*ssl\.example\.org$
> RewriteRule ^(.*)$ http://target.com/$1 [L,P]
>
> This works but the certificate is not valid for ssl.example.org only for
> www. thus the browser raise an error.
>
> Second try: (in a sub dir named proxy .htaccess)
>
> RewriteRule ^(.*)$ http://target.com/$1 [P,L]
>
> There raises the problem that the application on target.com perfoms an
> redirection to /foo/bar/ (mind the first slash) with proxy that makes
> example.org/foo/bar/ which raises an 404. example.org/proxy/foo/bar/ would
> be fine.
>
> How can I get around these problems?

You cannot get around the problem caused by an SSL certificate not
matching the hostname of your server. So you will have to use
www.example.com for your servername. 8BTW, there is no reason why you
couldn't have both an http and an https server with the same
servername, if that is the reason why your first atempt was with
ssl.example.com)

However, if both machines are a vhost on the same server, why not make
it easy: Make the ssl server use the same docroot as the none ssl
server...


Krist


-- 
krist.vanbesien@gmail.com
krist@vanbesien.org
Bremgarten b. Bern, Switzerland
--
A: It reverses the normal flow of conversation.
Q: What's wrong with top-posting?
A: Top-posting.
Q: What's the biggest scourge on plain text email discussions?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message