Re: OT: Apache as reverse SSL proxy

2010-10-05 Thread Ryan Coleman
On Oct 5, 2010, at 12:33 AM, Matthew Seaman wrote: Nowadays there is also the possibility of RFC2817 -- in essence you start an ordinary HTTP session, then issue a STARTTLS command and upgrade the connection to encrypted. This will allow name-based virtual hosting with TLS to work as

Re: OT: Apache as reverse SSL proxy

2010-10-05 Thread Adam Vande More
On Tue, Oct 5, 2010 at 1:36 AM, Ryan Coleman ryan.cole...@cwis.biz wrote: On Oct 5, 2010, at 12:33 AM, Matthew Seaman wrote: Nowadays there is also the possibility of RFC2817 -- in essence you start an ordinary HTTP session, then issue a STARTTLS command and upgrade the connection to

Re: OT: Apache as reverse SSL proxy

2010-10-05 Thread Ryan Coleman
On Oct 5, 2010, at 2:05 AM, Adam Vande More wrote: On Tue, Oct 5, 2010 at 1:36 AM, Ryan Coleman ryan.cole...@cwis.biz wrote: On Oct 5, 2010, at 12:33 AM, Matthew Seaman wrote: Nowadays there is also the possibility of RFC2817 -- in essence you start an ordinary HTTP session, then issue

Re: OT: Apache as reverse SSL proxy

2010-10-05 Thread Doug Poland
On Tue, Oct 05, 2010 at 02:32:11AM -0500, Ryan Coleman wrote: On Oct 5, 2010, at 2:05 AM, Adam Vande More wrote: On Tue, Oct 5, 2010 at 1:36 AM, Ryan Coleman ryan.cole...@cwis.biz wrote: On Oct 5, 2010, at 12:33 AM, Matthew Seaman wrote: Nowadays there is also the possibility of

OT: Apache as reverse SSL proxy

2010-10-04 Thread Doug Poland
Hello, I realize this is not a specific FreeBSD question, but a lot of knowledgeable apache admins hang around here. I am tasked with creating a reverse SSL proxy in a DMZ. A reverse proxy for http is simple, but I'm finding it challenging understanding all that needs to take place for apache

Re: OT: Apache as reverse SSL proxy

2010-10-04 Thread Adam Vande More
On Mon, Oct 4, 2010 at 5:15 PM, Doug Poland d...@polands.org wrote: Hello, I realize this is not a specific FreeBSD question, but a lot of knowledgeable apache admins hang around here. I am tasked with creating a reverse SSL proxy in a DMZ. A reverse proxy for http is simple, but I'm

Re: OT: Apache as reverse SSL proxy

2010-10-04 Thread Doug Poland
On Mon, Oct 04, 2010 at 09:19:52PM -0500, Adam Vande More wrote: On Mon, Oct 4, 2010 at 5:15 PM, Doug Poland d...@polands.org wrote: Hello, I realize this is not a specific FreeBSD question, but a lot of knowledgeable apache admins hang around here. I am tasked with

Re: OT: Apache as reverse SSL proxy

2010-10-04 Thread Adam Vande More
On Mon, Oct 4, 2010 at 10:53 PM, Doug Poland d...@polands.org wrote: What also complicates the matter is that the reverse proxy is supposed to act for several virtual hosts. The documentation for www/pound indicated HTTPS does not allow virtual hosting. I seem to recall bumping into this

Re: OT: Apache as reverse SSL proxy

2010-10-04 Thread Peter Boosten
On 5-10-2010 5:53, Doug Poland wrote: On Mon, Oct 04, 2010 at 09:19:52PM -0500, Adam Vande More wrote: The documentation for www/pound indicated HTTPS does not allow virtual hosting. I seem to recall bumping into this issue in the past that one cannot do named-based vhosts on HTTPS. Look

Re: OT: Apache as reverse SSL proxy

2010-10-04 Thread Matthew Seaman
On 05/10/2010 05:40:42, Peter Boosten wrote: On 5-10-2010 5:53, Doug Poland wrote: On Mon, Oct 04, 2010 at 09:19:52PM -0500, Adam Vande More wrote: The documentation for www/pound indicated HTTPS does not allow virtual hosting. I seem to recall bumping into this issue in the past that one