hallo martin!

i hope, that i can help you.

you put your ssl-directives into the virtual host. 
 
> Anyone know how to configure mod_ssl parameters when
> it's doing the client requests inside mod_proxy?
> 
> <VirtualHost 192.168.1.7:3128>
<VirtualHost 212.114.202.97:443>
  ServerName <name>
  ServerAdmin <e-mail>
  CustomLog /var/log/httpd/443_com/access.log common
  ErrorLog /var/log/httpd/443_com/error.log
  SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
  SSLCertificateFile <file> 
  SSLCertificateChainFile <file>
  SSLCertificateKeyFile <file> 
  SSLEngine on
  SSLSessionCacheTimeout 15
  SSLVerifyClient 0
  SSLVerifyDepth 10
  SSLOptions +FakeBasicAuth
  SSLLog /var/log/httpd/443_com/ssl.log
  SSLLogLevel error
  SetEnvIf User-Agent ".*MSIE.*" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
<IfModule mod_proxy.c>
<Directory proxy:*/member/*>
        for authorisation
</Directory>

>     ProxyRequests On
>     NoCache *

ProxyPassReverse /<name> http://<url>
ProxyPass /<name> http://<url>
ProxyPassReverse / http://<url>/
# no, if you work with RewriteRule
ProxyPass / http://<url>/
</IfModule>

> </VirtualHost>
> 
> as part of a mod_ssl-enabled server. It handles https://
> proxy requests just fine, but I also need the ability
> to force a SSL version, eg. SSLv2, for making requests 
> to the outside world.
> 
> Any ideas?
> 
> Also, how can I trace these SSL requests? I set 
> SSLLogLevel to debug but it wouldn't show anything.

      Michael Ott

---------------------------------
- Siemens AG - I&S IT PS 51 ERL - 
- Werner-von-Siemens-Strasse 60 - 
- 91050 Erlangen                -
- Tel. +49 91 31 7 42 0 54      -
- [EMAIL PROTECTED]   -
---------------------------------
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to