Re: need help with reverse proxy formod_security

Murch, Jeff wrote:
> One step closer Brian!
> 
> I can now connect to the reverse proxy http and I get forwarded to the https 
> backend page, perfect.  
> But, if I try to connect to the reverse proxy https it fails. Also the page 
> properties are not SSL.
> 
> Jeff


OK, I am a bit confused by what you wrote above :)

These work, correct?

 * User <=HTTP=> ProxyMachine <=HTTP=> Backend
 * User <=HTTP=> ProxyMachine <=HTTPS=> Backend

But these fail?

 * User <=HTTPS=> ProxyMachine <=HTTP=> Backend
 * User <=HTTPS=> ProxyMachine <=HTTPS=> Backend

Some things to check:

HTTPS is usually on port 443, so you probably have a 443 VirtualHost?

1) Verify HTTPS is setup correctly by removing any proxy directives and
just serve a simple static page.  Here is a minimal setup...

LoadModule ssl_module modules/mod_ssl.so

Listen 443
<VirtualHost *:443>
  ServerName your.server.name

  SSLEngine On
  SSLCertificateFile /path/to/your.crt
  SSLCertificateKeyFile /path/to/your/.key

</VirtualHost>


2)  You need to duplicate the environment with the ProxyPass, etc in the
443 VirtualHost as well.

LoadModule ssl_module modules/mod_ssl.so

Listen 443
<VirtualHost *:443>
  ServerName your.server.name

  SSLEngine On
  SSLCertificateFile /path/to/your.crt
  SSLCertificateKeyFile /path/to/your/.key

  SSLProxyEngine on
  ProxyPass / https://backend/
  ProxyPassReverse / https://backend/

</VirtualHost>



I think you need to brush up on your Apache configuration knowledge :)

http://wiki.apache.org/httpd/
http://httpd.apache.org/docs/2.2/faq/
http://httpd.apache.org/docs/2.2/

I don't mind helping you out when I have time, but many of these
questions are not ModSecurity related and you may want to take them to
users@xxxxxxxxxxxxxxxx as they may be of more help to you for in-depth
configuration.



-B

-- 
Brian Rectanus
Breach Security

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/