httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Reid Watson <reid.wat...@auckland.ac.nz>
Subject Re: [users@httpd] ReverseProxy InvalidUriScheme
Date Sun, 30 Oct 2016 00:11:21 GMT
Hi Daniel 

I have been testing your proposed solutions 

- <VirtualHost *:80> configuration works correctly 
- <VirtualHost *:443> I receive InvalidUriScheme error message 

I believe backend checks the protocol, problem is I don't have access to the backend application
— I will have a chat to the vendor 

I thought I could fake Protocol to the backend server but I’m making assumptions without
understanding the application in more details  

RequestHeader set X-Forwarded-Proto

Cheers

Reid 

> On 28/10/2016, at 5:45 am, Daniel <dferradal@gmail.com> wrote:
> 
> ServeName can just take host names, not the scheme (http/https), and virtualhost *:*
looks to me a very complicatinhg, as in, normally one virtualhost is SSL or not, but not both.
So how about trying to go with what's more correct and simple:
> 
> <VirtualHost *:80>
>     ServerName testsite.dev.auckland.ac.nz
> 
>     ProxyPass / http://xxx.xxx.xxx.xxx/
>     ProxyPassReverse / http://xxx.xxx.xxx.xxx/
> </VirtualHost>
> 
> <VirtualHost *:443>
>     SSLEngine on
>     ServerName testsite.dev.auckland.ac.nz
> 
>     ProxyPass / http://xxx.xxx.xxx.xxx/
>     ProxyPassReverse / http://xxx.xxx.xxx.xxx/
> </VirtualHost>
> 
> Or am I missing something?
> 
> 
> 
> 
> 
> 
> 
> 2016-10-26 11:07 GMT+02:00 Reid Watson <reid.watson@auckland.ac.nz>:
> Hi Everyone,
> 
> I have a small issue when configuring a ReverseProxy and Im wondering if someone has
run into this issue before
> 
> - Application Innerscope developed in MS silverlight
> (iframe content)
> - Application does not support HTTPS
> (We didn’t write the app in-house this has been provided by vendor)
> 
> - We do SSL offloading at the load balancer level before you hit the apache sever
> 
> - Proxy Config (very simple)
> 
> <VirtualHost *:*>
>         <IfDefine DEV>
>                 ServerName https://testsite.dev.auckland.ac.nz
>         </IfDefine>
> 
>         RequestHeader set X-Forwarded-Proto http
>         RewriteRule .* http://xxx.xxx.xxx.xxx$0 [P,NE,QSA,L]
> 
> </VirtualHost>
> 
> 1. Application Error:
> 
> [InvalidUriScheme]
> Arguments: https,http
> Debugging resource strings are unavailable. Often the key and arguments provide sufficient
information to diagnose the problem. See http://go.microsoft.com/fwlink/?linkid=106663&Version=5.1.41212.00&File=System.ServiceModel.dll&Key=InvalidUriScheme
> Parameter name: via
> 
> 2. From testing
> 
> - Tested the Virtual Site with HTTP and Reverse Proxy with HTTP — Works as excepted
> 
> <VirtualHost *:*>
>         <IfDefine DEV>
>                 ServerName http://testsite.dev.auckland.ac.nz
>         </IfDefine>
> 
>         RewriteRule .* http://xxx.xxx.xxx.xxx$0 [P,NE,QSA,L]
> </VirtualHost>
> 
> 3. Apache Logs
> 
> testsite.dev.auckland.ac.nz: 127.0.0.1 - - [26/Oct/2016:21:36:54 +1300] "GET /Innerscope.xap?ignoreme=%20%20%20%20%201425527793
HTTP/1.1" 200 2400728 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:49.0) Gecko/20100101
Firefox/49.0”
> 
> The backend server rejects the request because it requires HTTP not HTTPS
> 
> 4. Attempted Workarounds / Hack Options - thought I could attempt to fake the Protocol
> RequestHeader set X-Forwarded-Proto http
> 
> Any thoughts ???
> 
> 
> 
> -- 
> Daniel Ferradal
> IT Specialist
> 
> email         dferradal at gmail.com
> linkedin     es.linkedin.com/in/danielferradal

Mime
View raw message