httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Rose, John B" <jbr...@utk.edu>
Subject Re: [users@httpd] SSL not working for ServerAlias through load balancer
Date Tue, 12 May 2015 19:53:15 GMT
Yann

All efforts appreciated.

First.abc.com goes thru a load balancer

http://first.abc.com

Works fine. 

https://first.abc.com

does not

If I understand your question correctly.

John



On 5/12/15 3:40 PM, "Yann Ylavic" <ylavic.dev@gmail.com> wrote:

>Probably a silly question, but, is first.abc.com accessible (dns,
>route, ...) from the client host?
>
>Regards,
>Yann.
>
>On Tue, May 12, 2015 at 9:12 PM, Rose, John B <jbrose@utk.edu> wrote:
>> We gave that a try based on your recommendation, but it did not change
>>the
>> result.
>>
>> We are still looking for an answer.
>>
>> Thanks
>>
>> On 5/12/15 12:03 PM, "Jack Swan" <john.swan@oracle.com> wrote:
>>
>>>
>>>Occasionally we've had the spinning connecting problem here during some
>>>of our development.
>>>You might try clearing/deleting any certificates for that particular
>>>host
>>>in Firefox.
>>>
>>>Tools->Options - Advanced.  Select View Certificates and delete/distruct
>>>the certs for that host.
>>>
>>>Maybe that'll work.  It did for us.
>>>
>>>----- Original Message -----
>>>From: jbrose@utk.edu
>>>To: users@httpd.apache.org
>>>Sent: Tuesday, May 12, 2015 11:47:24 AM GMT -05:00 US/Canada Eastern
>>>Subject: Re: [users@httpd] SSL not working for ServerAlias through load
>>>balancer
>>>
>>>In Firefox we get the spinning "ConnectingŠ" indicator in the tab, and
>>>it
>>>never advances any further.
>>>
>>>On 5/12/15 11:27 AM, "Rich Bowen" <rbowen@rcbowen.com> wrote:
>>>
>>>>
>>>>
>>>>On 05/12/2015 10:40 AM, Rose, John B wrote:
>>>>> Red Hat 7 Apache 2.4
>>>>>
>>>>> We are using name based virtual hosts SSL configuration.
>>>>>
>>>>> Which is working except not for one of our ServerAlias that goes
>>>>>thru a
>>>>> load balancer
>>>>>
>>>>> Not using SSL works fine. We can access all these via the browser Š
>>>>>
>>>>> http://baseserver.sub.abc.com
>>>>> http://first.sub.abc.com
>>>>> http://first.abc.com
>>>>>
>>>>> Using SSL we can go to these successfully Š
>>>>>
>>>>> https://baseserver.sub.abc.com
>>>>> https://First.sub.abc.com
>>>>>
>>>>> But not this Š
>>>>>
>>>>> https://first.abc.com
>>>>>
>>>>> Here is our config Š
>>>>>
>>>>> Have tried these ..
>>>>> <VirtualHost *.443>
>>>>>        and
>>>>> <VirtualHost first.sub.abc.com:443>
>>>>>        and
>>>>> <VirtualHost first.abc.com:443>
>>>>>
>>>>>      ServerName baseserver.sub.abc.com
>>>>>      ServerAlias first.sub.abc.com
>>>>>      ServerAlias first.abc.com
>>>>>
>>>>>      SSLEngine on
>>>>>      DocumentRoot "/www/docs"
>>>>>
>>>>>    <Directory "/www/docs">
>>>>>      Š
>>>>>    </Directory>
>>>>>
>>>>>
>>>>>    ProxyPassMatch ^/(.*\.php(/.*)?)$ fcgi://127.0.0.1:9000/www/docs/
>>>>>    DirectoryIndex index.php index.html
>>>>>
>>>>> SSL Certificate stuff Š
>>>>>
>>>>> </VirtualHost>
>>>>>
>>>>>
>>>>> Any suggestions why the Load Balanced  SSL ServerAlias.
>>>>> https://first.abc.com,  is not working?
>>>>
>>>>Can you elaborate on "not working"? What exactly happens?
>>>>
>>>>
>>>>--
>>>>Rich Bowen - rbowen@rcbowen.com - @rbowen
>>>>http://apachecon.com/ - @apachecon
>>>>
>>>>---------------------------------------------------------------------
>>>>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>>For additional commands, e-mail: users-help@httpd.apache.org
>>>>
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>For additional commands, e-mail: users-help@httpd.apache.org
>>>
>>>
>>>---------------------------------------------------------------------
>>>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>>For additional commands, e-mail: users-help@httpd.apache.org
>>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>For additional commands, e-mail: users-help@httpd.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message