Due to various bugs in iis server , i'm trying to protect an
 existing application by putting apache as a proxy .



before:
client ------------------extranet firewall----------------iis port 443
(www.clientapp.com)


after :
this schema works fine for moment:

www.clientapp.com points now to apache server .
The client connects in ssl to apache.
Apache server is configured this way: (from httpd.conf)
-------------------
RewriteEngine on
RewriteRule    ^/index.html  http://extranet:4598/formulaire.html  [P]
RewriteRule    ^/(.+)  http://extranet:4598/$1  [P]
-------------------

The firewall allows only apache to connect to iis server .

The session between apache and iis is not encrypted.


client ----1------->firewall--2-->apache (mod_ssl , mod_proxy
mod_rewrite)
               <--3--
   |
   |
   |
   4
   |
   |
   iis (extranet:4598)


I want now to use X509 certificates to access the application on iis
server .

i tried to change the rewrite rules on apache :
-------------------
RewriteEngine on
RewriteRule    ^/index.html  https://extranet:4599/formulaire.html  [P]
RewriteRule    ^/(.+)  https://extranet:4599/$1  [P]
-------------------

The https to https stuff in mod_proxy does not seem to work properly .
I'm using apache 1.3.9 with mod_ssl 2.4.1-1.3.9 .

Questions:
1.Is there a patch allowing this kind of proxy ?
2. Does anyone tried this  before ?




______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to