Hi Justin,
Apache can do the trick, see:
http://httpd.apache.org/docs/2.0/mod/mod_proxy.html
The proxy needs to support the Connect method it seems (I'm not familiar with
the details).
Here's the relevant text from Nicolas:
--------------
Hi all, I know OpenVPN-ALS is now discontinued, but it works very well and I
needed a way to put an OpenVPN-ALS behind a reverse proxy to allow multiple
HTTPS/SSL access with a single IP address.
The main OpenVPN-ALS part works without problem behind a reverse proxy
(Apache). The real challenge was to get the agent running.
I got it running by sending an "HTTP CONNECT" to the reverse proxy to allow
the agent to communicate directly with the server. I wrote a patch (a lot
of files to modify) to allow the configuration of the reverse proxy in the
user profile (like the forward proxy). Everything is working perfectly (with
or without forward proxy). When you work with a forward proxy, the agent will
send 2 "HTTP CONNECT", one to the forward proxy and a second one to the
reverse proxy, to open a tunnel to the server. To get everything running,
you need a recent version of Apache (with SNI support), openssl with SNI
support and a patch to Apache to allow "HTTP CONNECT" through a SSL virtual
host. If somebody is interested in such a solution, drop a line on the forum
or the mailinglist and I'll try to build a clean patch and write some
generic instructions.
Nicolas
-------------
Can Cherokee support this as well?
Thanks!
R.
_______________________________________________
Cherokee mailing list
[email protected]
http://lists.octality.com/listinfo/cherokee
