Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (athena.apache.org: domain of knst.kolinko@gmail.com
 designates 74.125.82.180 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <522E185E.3050100@christopherschultz.net>
References: <522E185E.3050100@christopherschultz.net>
Date: Tue, 10 Sep 2013 16:03:50 +0400
Message-ID: 
 <CABzHfVn1tu3+HFyJpw-yg8pyDwwEVDPJ71tb_Uf8zKUtVugwtg@mail.gmail.com>
Subject: Re: [OT] Tunneling an arbitrary protocol via SSL/TLS
From: Konstantin Kolinko <knst.kolinko@gmail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

>
> Somewhat off-topic, but I was wondering if anyone knew of any package
> or technique that could be used to tunnel an arbitrary protocol via TLS?
>
> In this particular case, I need to wrap HTTP in TLS (to make HTTPS :)
> without modifying the source of the client -- and the client does not
> support HTTPS. :(
>
> So far, I've come up with the following possibilities:
>
>(...)
>
> 2. Use an HTTP proxy. This obviously wouldn't support an "arbitrary"
> protocol, but I think it would get the job done. Any suggestions for
> simply and free proxy software? About all I need to do is configure a
> client SSL certificate.
>

Apache HTTPD can be configured as a proxy for remote HTTPS server.

You will need mod_proxy (ProxyPass https://otherserver/) and mod_ssl
(SSLProxyEngine on).

I never used authentication by client certificate there, but it looks
that it is possible (SSLProxyMachineCertificateFile).

http://httpd.apache.org/docs/2.4/mod/mod_ssl.html


Best regards,
Konstantin Kolinko

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org