https/SSL and ProxyRemote did not work when using a reverse proxy (PLEASE HELP:)

"Hanack Leif" <[email protected]>
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <[email protected]>
Hello,

i have nearly the same problem like
"nerb"
(http://marc.theaimsgroup.com/?l=apache-httpd-users&m=109474858416348&w=
2)
and
"fitzner"
(http://marc.theaimsgroup.com/?l=apache-httpd-users&m=110309511816081&w=
2)
have.
They do not get any answer. Hope dies last:)) Therefore i hope that
someone can give 'us' an answer, even if it is a "no, that do not work".

I'm trying to get the following szenario to work with Apache
2.0.51/OpenSSL 0.9.7d.

Client --http--> Reverse Proxy  --internal--> Forward Proxy
(ProxyRemote) --https--> Webserver

Ralf Engelschall said: "when you want to forward to a HTTPS target you
need HTTPS support in mod_proxy. That's only possible with mod_ssl
(which enhanced mod_proxy for HTTPS).  Then you can do all: Accept HTTP
and HTTPS and connect to HTTP and HTTPS targets, i.e. create gateways in
all combinations."

Is it possible that SSL-forwarding is not working when using
ProxyRemote?

My logs :

[Mon Dec 13 14:14:50 2004] [debug] ssl_engine_io.c(1517): OpenSSL: I/O
error, 7 bytes expected to read on BIO#a55e90 [mem: a5b670] [Mon Dec 13
14:14:50 2004] [debug] ssl_engine_kernel.c(1793): OpenSSL:
Exit: error in SSLv2/v3 read server hello A [Mon Dec 13 14:14:50 2004]
[info] SSL Proxy connect failed [Mon Dec 13 14:14:50 2004] [info]
Connection to child 1 closed with abortive shutdown(server
172.16.37.124:80, client 172.16.34.50) [Mon Dec 13 14:14:50 2004]
[error] (20014)Error string not specified
yet: proxy: request failed to 172.16.34.50:3128 (www-cache)

My config : 

<VirtualHost serverIP:80>
ServerName intra-xy.com
ServerAdmin [email protected]
ProxyRequests Off
ProxyRemote * http://proxyIP:3128
SSLProxyEngine on
ProxyPass / https://remoteServerIP/
ProxyPassReverse / https://remoteServerIP/ </VirtualHost>

In a test szenario where i can reach the 'remoteServer' directly
(without a proxy) it is working.

Client --http--> Reverse Proxy  --https--> Webserver

Sh*t, that the remoteServer is only reachable via proxy :)

Hope you can help me,
thanks in advance, Leif
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.