Re: SSL proxy

Eckard Wille <[email protected]> Fri, 11 Jul 2008 09:57:03 +0200
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <[email protected]>
[email protected] schrieb:
> I have several web servers currently that all have the same IP, but
> different host names, and I have an apache that uses mod_proxy to direct
> requests to the correct internal server to process the request.
> 
> I would like to use my apache proxy server to provide SSL encryption and
> decryption, and not have to have each individual server do that.
> 
> Is that possible?
> 
> I have worked with virtual host configuration, and I have tried to set up
> the ssl stuff so that this will work, but so far I have not been successful.
> 
> I have tried to search for this, but the closest I have come is proxy to an
> ssl server.  I want to have the proxy server do the ssl stuff for me.

Hi,

you can not use SSL with virtual hosting, see 
http://www.modssl.org/docs/2.8/ssl_faq.html#ToC47

You'll have to get a dedicated ip for every single ssl host. You could 
play around with one ssl proxy on your single ip with a common name 
and do some rewriting according to an url praefix matching the secure 
parts of your backend virtual hosts; decide yourself if this config 
work is worth it.

Regards

Eckard
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]