* Laurentiu Coica wrote [28.11.2007 13:58]:
Salutari,

Incerc sa dau de cap unei configuratii "clasice" de SSL reverse proxy pe un
RedHat EL 5, cu mod_ssl-2.2.3-11.el5, httpd-2.2.3-11.el5, in arhitectura:

  Browser (client) -- https//gateway.domain.ro/ (DMZ)  --> Reverse Proxy
      -->  http://app.domain.ro:7782/ (intranet)

[...]

Nu stiu de ce nu merge la tine, uite o configuratie minimala care la mine merge, poate te ajuta.

<VirtualHost IP:443>
ServerSignature On
UseCanonicalName Off
HostnameLookups Off

SSLEngine On
SSLCertificateFile /etc/blah.crt
SSLCertificateKeyFile /etc/blah.pem
SSLCertificateChainFile /etc/blah/cacert.crt


SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:+TLS:+SSLv3:+EXP
SSLProtocol all -SSLv2


ProxyRequests Off
RewriteEngine On
RewriteRule ^/repository/(.*)$  http://intranet:8080/$1 [P]
ProxyPassReverse        /repository/ http://intranet:8080/
</VirtualHost>





_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug

Raspunde prin e-mail lui