Return-Path: X-Original-To: apmail-httpd-users-archive@www.apache.org Delivered-To: apmail-httpd-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 32EBC11E14 for ; Thu, 26 Jun 2014 18:36:23 +0000 (UTC) Received: (qmail 15630 invoked by uid 500); 26 Jun 2014 18:36:10 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 15339 invoked by uid 500); 26 Jun 2014 18:36:10 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 15137 invoked by uid 99); 26 Jun 2014 18:36:10 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Jun 2014 18:36:10 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS,WEIRD_PORT X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of samuelfac@gmail.com designates 209.85.160.175 as permitted sender) Received: from [209.85.160.175] (HELO mail-yk0-f175.google.com) (209.85.160.175) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 26 Jun 2014 18:36:03 +0000 Received: by mail-yk0-f175.google.com with SMTP id 9so2228847ykp.20 for ; Thu, 26 Jun 2014 11:35:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type; bh=jkGLZnthiu1fz4tAcjQU6jN9x2rvtMoAi2ePg2wp7DQ=; b=WQ7E9qPvjl5SSXOf0QXiydVeMMAERgfQ5UfXjeEfGQMmtL7NW/Z1f5YhOaNCzN3uZb WHOFk94DGkhmRKARXqOxvq3bvpp+Qu3gi+aH7GcGRSSyzpA6i0he1KcCf1s2r/EPC2ur 1IeMhyHerf6ElsXRPBR7H7p5icV/rlIph4H24eKyJpQ5KUQPjtqxtnIrcc1tcuY+B3/s vrWCf/HxEd8XM06OaUJ3SEdSEgUB0QQFVmvloFIldTb/DRHsMu0cEPB0WpE4nFGDVs8m GZoSt11v5ra+z0OChk3cLV4UAEO81cXw/SD7PBUG1FJZRuXZAo37DeCGQZJt+fWwCch3 O8mg== X-Received: by 10.236.25.234 with SMTP id z70mr24167780yhz.107.1403807738751; Thu, 26 Jun 2014 11:35:38 -0700 (PDT) MIME-Version: 1.0 Received: by 10.170.151.67 with HTTP; Thu, 26 Jun 2014 11:35:08 -0700 (PDT) From: Samuel Facchinello Date: Thu, 26 Jun 2014 15:35:08 -0300 Message-ID: To: users@httpd.apache.org Content-Type: multipart/alternative; boundary=089e0149be7a99f3c304fcc175b7 X-Virus-Checked: Checked by ClamAV on apache.org Subject: [users@httpd] Proxy Reverse + Jboss https --089e0149be7a99f3c304fcc175b7 Content-Type: text/plain; charset=UTF-8 Hello. This is the first time I post something here, because whenever I had a question always found the solution at some old topic. But this time I have not found something that works. So let the doubt: ENVIRONMENT: Apache 2.2 (HTTPS) => Jboss 4.2.3 (HTTPS) I have an application running on JBoss, with authentication via digital certificates, to directly access the JSP page on Jboss works perfectly, the script opens, I choose the certificate in jsp page use "*java.security.cert.X509Certificate certChain[] = (java.security.cert.X509Certificate[]) request.getAttribute("javax.servlet.request.X509Certificate");*" to pick up the certificate and validate in my application. This works perfectly. Now when I put the APACHE Jboss before doing the redirect from https to https jboss, the request.getAttribute always returns NULL. What should I do? I have also tried with the variables: SSL_CLIENT_CERT, but only returns NULL Settings that did: ** * ServerName myserver.local * * SSLEngine On* * SSLProxyEngine On * * SSLCertificateFile ...myfile.crt* * SSLCertificateKeyFile ...myfile.key * * SSLCACertificateFile ...ca.crt* * SSLVerifyClient optional * * SSLVerifyDepth 2* * SSLOptions +ExportCertData + StdEnvVars * * * * Order deny,allow* * Allow from all* * * * * * ProxyPass https://myserver:8443/ * * ProxyPassReverse https://myserver:8443/ * * * ** anyone have any idea to help me? grateful Att, Samuel Facchinello http://desenvolvendoemflex.blogspot.com Joinville - SC - Brazil --089e0149be7a99f3c304fcc175b7 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
<= span class=3D"">Hello. This is the first time I post something here, because whenever= I had a question always found the solution at some old topic. But this time I have not found <= span class=3D"">something that works. = So let the doubt:

ENVIRONMENT:
= Apache 2.2 (HT= TPS) =3D> Jboss 4.2.3 (HTTPS)

I have an application running = on JBoss, with= authentication via digital= certificates, to directly access the JSP= page on Jboss works perfectly
, the scrip= t opens, I choose the certificate in js= p page use
"
java.security.cert.X509Certificate certChain[] =3D (j= ava.security.cert.X509Certificate[]) request.getAttribute("javax.servl= et.request.X509Certificate");"
to pick up the certificate and validate in my application. This works perfectly.

Now when I put the APACHE Jboss before doing the redirect from https to https jboss, the request.getAttribute always returns
NULL. What should I do?

I have also tried with the variables:

SSL_CLIENT_CERT, but only returns NULL

Settings that did:
<= /span>
<VirtualHost myserver:443>
=C2=A0= =C2=A0=C2=A0 ServerName myserver.local

=C2=A0=C2=A0=C2=A0 SSLEngine On

=C2=A0=C2=A0=C2=A0 SSLProxyEngine On
=C2=A0=C2=A0=C2=A0 SSLCertificateFile ...myfile.crt
=C2=A0=C2=A0=C2=A0 SSLCertificateKeyFile ...myfile.ke= y
=C2=A0=C2=A0=C2=A0 SSLCACertificateFile ...ca.crt
<= /span>
=C2=A0=C2=A0=C2=A0 SSLVerifyClient optional
=C2=A0=C2=A0=C2=A0 SSLVerifyDepth 2
<= /i>
=C2=A0=C2=A0=C2=A0 SSLOptions +ExportCertData + StdEnvVars

=C2=A0=C2=A0=C2=A0 <Proxy = *>
=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Order deny,allow
<= /i>
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Allow from all
<= /span>
=C2= =A0=C2=A0=C2=A0 </Proxy>

=C2=A0=C2=A0=C2= =A0 <Location />
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ProxyPass=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 https://myserver:8443/
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ProxyPassReverse = https://myserver:8443/=
=C2=A0=C2=A0=C2=A0 </Location>

</VirtualHost>




= anyone have any idea = to help me?

grateful






Att,
Samuel Facchinello
--089e0149be7a99f3c304fcc175b7--