2010/7/2 Igor Ci= cimov <icicimov@gmail.com>

Hi,

Using "ProxyRequests off" means the apache is going to= be a reverse proxy but I can't see your ProxyPassreverse statement. Al= so the order of the proxy commands is little bit weird. I wold do it in thi= s way:

ProxyRequests off

ProxyHTMLLogVerbose On
ProxyPreserveHost O= n
ProxyPass / http= s://10.10.0.1:8443/
ProxyPassReverse / https://10.10.0.1:8443/
ProxyHTMLURLMap https://its= mtest/ /

Cheers,
Igor

On Fri, Jul 2, 2010 at 12:28 AM, Mauri= <lain80@gmail.com> wrote:

Hi expert,

my application crashes (BMC Remedy) in the same point. This is my enviroment: Client --> SSL to Apache Prox --> Tomcat on = 8996.

In the apache log i'm reading this error:

[Thu Jul = 01 16:37:25 2010] [debug] ssl_engine_io.c(1821): OpenSSL: I/O error, 3237 b= ytes expected to read on BIO#8a2fdf8 [mem: 8a4d420]
[Thu Jul 01 16:37:25 2010] [info] [client 10.10.0.1] (104)Connection reset = by peer: SSL input filter read failed.
[Thu Jul 01 16:37:25 2010] [error= ] [client 10.173.202.231] (104)Connection reset by peer: proxy: error readi= ng status line from remote server 10.10.0.1, referer: https://itsmtest/a= rsys/atrium/AtriumConsole.swf
[Thu Jul 01 16:37:25 2010] [debug] mod_proxy_http.c(1466): [client 10.173.2= 02.231] proxy: NOT Closing connection to client although reading from backe= nd server 10.10.0.1 failed., referer: https://itsmtest/arsys/atrium/Atri= umConsole.swf
[Thu Jul 01 16:37:25 2010] [error] [client 10.173.202.231] proxy: Error rea= ding from remote server returned by /arsys/plugins/AtriumWidget/messagebrok= er/amfsecure, referer: https://itsmtest/arsys/atrium/AtriumConsole.swf
[Thu Jul 01 16:37:25 2010] [debug] proxy_util.c(2062): proxy: HTTPS: has re= leased connection for (10.10.0.1)

What kind of check can I do?
Many thanks for all suggest, as usual
Cheers,
Mauri

this is = my server:

[root@Proxy1 httpd]# uname -a
Linux Proxy1 2.6.18-128.el5 #1 SMP Wed= Dec 17 11:42:39 EST 2008 i686 i686 i386 GNU/Linux
[root@Proxy1 httpd]# = rpm -qa | grep httpd
httpd-manual-2.2.3-31.el5_4.2
system-config-http= d-1.3.3.3-1.el5
httpd-2.2.3-31.el5_4.2
httpd-devel-2.2.3-31.el5_4.2

this is my ss= l.conf configuration:

LoadModule ssl_module modules/mod_ssl.so
Lo= adFile=A0=A0 /usr/lib/libxml2.so
LoadModule proxy_html_module modules/mo= d_proxy_html.so
LoadModule xml2enc_module modules/mod_xml2enc.so

Listen 443
AddTy= pe application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl=A0=A0= =A0 .crl
SSLPassPhraseDialog=A0 builtin
SSLSessionCache=A0=A0=A0=A0= =A0=A0=A0=A0 shmcb:/var/cache/mod_ssl/scache(512000)
SSLSessionCacheTimeout=A0 300
SSLMutex default
SSLRandomSeed startup = file:/dev/urandom=A0 256
SSLRandomSeed connect builtin
SSLCryptoDevic= e builtin
NameVirtualHost itsmtest:443
<VirtualHost itsmtest:443&g= t;
ServerName itsmtest
ErrorLog logs/ictitsm_ssl_error_log_443
TransferL= og logs/ictitsm_ssl_access_log_443
LogLevel Debug
ProxyHTMLLogVerbose= On
ProxyPreserveHost On
ProxyPass / https://10.10.0.1:8443/
ProxyHTMLURLMap https://its= mtest/ /
ProxyRequests off
SetEnv force-proxy-request-1.0 1
Se= tEnv proxy-nokeepalive 1
SetEnv proxy-initial-not-pooled 1
timeout 90= 0

<Location />
=A0=A0=A0=A0=A0=A0=A0 ProxyPassReverse https://itsmtest/
=A0=A0=A0=A0=A0=A0=A0 ProxyHTMLEnable = On
=A0=A0=A0=A0=A0=A0=A0 ProxyHTMLMeta On
=A0=A0=A0=A0=A0=A0=A0 Proxy= HTMLURLMap=A0 /=A0=A0=A0=A0=A0 /
=A0=A0=A0=A0=A0=A0=A0 RequestHeader=A0= =A0=A0 unset=A0 Accept-Encoding
</Location>

SSLEngine on
SSLProxyEngine on
SSLProtocol a= ll -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+= LOW
SSLCertificateFile /etc/httpd/cert/proxy_coll_new.crt
SSLCertific= ateKeyFile /etc/httpd/cert/proxy_coll_new.key
SSLCertificateChainFile /etc/httpd/cert/GlobalCA.cer

<Files ~ &qu= ot;\.(cgi|shtml|phtml|php3?)$">
=A0=A0=A0 SSLOptions +StdEnvVars=
</Files>
<Directory "/var/www/cgi-bin">
=A0= =A0=A0 SSLOptions +StdEnvVars
</Directory>
SetEnv proxy-nokeepalive 1
SetEnvIf User-Agent &qu= ot;.*MSIE.*" \
=A0=A0=A0=A0=A0=A0=A0=A0 nokeepalive ssl-unclean-shu= tdown \
=A0=A0=A0=A0=A0=A0=A0=A0 downgrade-1.0 force-response-1.0
Cus= tomLog logs/ssl_request_log \
=A0=A0=A0=A0=A0=A0=A0=A0=A0 "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \&q= uot;%r\" %b"
</VirtualHost>