Hi Mark & Chris,

Thank you for the responses.  I have gone about and installed a fresh Apache
(on a seperate box), and have documented my steps in

http://bruniglobal.blogspot.com/2010/09/load-balancing-4-tomcats-with-apache-22.html

So far so good.  I can load balance across all 4 tomcats, BUT I HAVE NOT
ENABLED/ADDED SSL yet.

Could the the ssl config be causing me grief?

Listen 172.16.29.148:443

AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl    .crl

SSLPassPhraseDialog  builtin

SSLSessionCache
"dbm:E:/products/thirdparty/apache-2.2.15-01/logs/ssl_scache"
SSLSessionCacheTimeout  300

SSLMutex default

<VirtualHost _default_:443>

DocumentRoot "E:/products/thirdparty/apache-2.2.15-01/htdocs"
ServerAdmin supp...@blabla.com
LogLevel error
ErrorLog "E:/products/thirdparty/apache-2.2.15-01/logs/ssl_error.log"
TransferLog "E:/products/thirdparty/apache-2.2.15-01/logs/ssl_access.log"

JkMount  /* loadbalancer

JkOptions     +ForwardSSLCertChain

SSLEngine on

SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

SSLCertificateFile
"E:/synetek/products/thirdparty/apache-2.2.15-01/conf/ssl/wildcard-zia.com.crt"
SSLCertificateKeyFile
"E:/synetek/products/thirdparty/apache-2.2.15-01/conf/ssl/zia.com.key"


<FilesMatch "\.(cgi|shtml|phtml|php)$">
    SSLOptions +StdEnvVars
</FilesMatch>

<Directory "E:/synetek/products/thirdparty/apache-2.2.15-01/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

BrowserMatch ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

CustomLog
"E:/synetek/products/thirdparty/apache-2.2.15-01/logs/ssl_request.log" \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

</VirtualHost>

Reply via email to