We run Apache as a SSL proxy to our A4D/4D 2004 application. At our
site we run Apache and A4D/4D on separate servers and get the
occasional proxy error ("error reading status line from remote
server"). At a client site they run Apache and A4D/4D on the same
Windows server and receive a lot of proxy errors. We tried:
SetEnv force-proxy-request-1.0 1
SetEnv proxy-nokeepalive 1
but it didn't help. Not sure if anybody else running Apache as a proxy
has experienced this?
On Jan 30, 2008, at 12:19 PM, Brad Perkins wrote:
Steve,
A few question as we're planning to do something similar in the not
to distant future.
1. Are Apache and 4D/Active4D running on the same box.?
2. I'm assuming Apache has ssl enabled?
3. I'm not clear whether 4D (or 4D Client) has ssl enabled? If not,
are there any gotchas proxying from a secured host to a non-secured
host?
4. Do you have signed SSL certs for each of the virtual hosts on
your Apache Web server?
Thanks,
Brad
Steve Alex wrote:
On Jan 29, 2008, at 3:38 PM, Peter Jakobsson wrote:
Steve -
I am a bit stumped at how best to handle SSL connections with
Apache in front at the moment.
Can you tell us if 4D or Apache is actually doing the encryption ?
It looks like Apache from your rewrite code. Do you have the
'real' certificate files configured in Apache ?
In my case, Apache. We have a domain certificate configured in
Apache.
The problem I would have with this configuration is that if
Active4D is being passed SSL requests on a port other than 443, it
thinks they're not secure and the logic which tests for the secure
port breaks.
We could never get SSL working in 4D with client as the web server.
We finally gave up and made the whole site secure with Apache. I'm
serving two virtual hosts. One is an internal portal which we've
wanted to be secure for a while. The other is a site that allows on-
line applications for training we are conducting, so at least some
of it needed to be secure. There is actually a third site on the
same box that runs secure on Apache. It use some simple php that
calls Active4D through curl and allows downloads of pre-filed PDF
application for projects we have not switched over to on-line
applications. Then, why not, there is another virtual host on
Apache whose only purpose is to do file uploads using a drag and
drop Java applet and some php. The php calls back Active4D when a
file has been upload so it can move the file to the proper location.
I think 2004 allows SSL on ports other than 443, but we never tried
that. My *secure comes over as "0". I imagine you can listen to 443
and 80 on Apache and rewrite to different ports on 4D (say 8080 and
8443).
I am seem able to get secure requests served just using the code
in the Active4D Wiki, but "get request value(string(A4D Request
Host Port))" returns 8080 instead of 443 so I assume Apache is
rewriting everything to 4D's non-secure port at the moment.
Peter
_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/
_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/
---------------------------------------------------
Flemming Andersen AKTIV Software Corporation
[EMAIL PROTECTED] 723 Paskin Way
Tel: 250.727.3442 Victoria, BC V8Z 6N4, Canada
Fax: 250.727.3740 http://www.aktiv.com
_______________________________________________
Active4D-dev mailing list
[email protected]
http://mailman.aparajitaworld.com/mailman/listinfo/active4d-dev
Archives: http://mailman.aparajitaworld.com/archive/active4d-dev/