Re: [Pound Mailing List] e500 for 127.0.0.1 response error read from 127.0.0.1:9443/GET

Turns out all I had to do was to add this directive to the BackEnd
section: HTTPS

All is well now.

Mike

On 11/12/2015 11:08 AM, Mike Slinn
wrote:

I am running pound 2.6 and a Play Framework 2.4.3 webapp on an
XUbuntu 14.10 server. This server and the client machine that I
test are on the same subnet. The server has an entry in /etc/hosts
that looks like this:

127.0.0.1 localhost gojira.scalacourses.com

The client has an entry in /etc/hosts that looks like
this:

192.168.10.21 gojira.scalacourses.com

My Play Framework 2.4.3 webapp responds to http on port
9000 and https on port 9443. It delivers the desired
content for the following URLs when accessed from the client
machine:

http://gojira.scalacourses.com:9000/Dingbat

https://gojira.scalacourses.com:9443/Dingbat

The problem is that Pound fails to frontend the webapp for SSL
when accessed using default port for https (i.e. from https:// gojira.scalacourses.com/Dingbat).

The log message from Pound is:

e500 for 127.0.0.1 response error read from 127.0.0.1:9443/GET
(url follows)

... and the webapp never gets the request

... and the web browser shows "An internal server error
occurred. Please try again later."

I am using a self-signed certificate for the Play webapp,
generated by JDK 8's keytool, like this:

keytool -genkey -keystore /var/work/sslDemo/conf/ssl/selfSigned.keystore.jks

-keyalg RSA -keypass password -storepass password -keysize
2048

So Pound could use the self-signed certificate, I converted it
to a PEM without encrypted keys like this:

$ keytool -importkeystore \
-srckeystore /var/work/sslDemo/conf/ssl/selfSigned.keystore.jks \
-destkeystore /var/work/sslDemo/conf/ssl/selfSigned.keystore.p12 \
-srcstoretype jks \
-deststoretype pkcs12
$ openssl pkcs12 \
-in /var/work/sslDemo/conf/ssl/selfSigned.keystore.p12 \
-out /var/work/sslDemo/conf/ssl/selfSigned.keystore.pem \
-nodes

Here is my /etc/pound/pound.cfg:

User "root"

Group "root"

LogLevel 2

Alive 30

Control "/var/run/pound/poundctl.socket"

# Redirect all http requests on port 80 to https

# The Play webapp should never see this happen because Pound
issues the redirect to the web browser

ListenHTTP

Address 0.0.0.0

Port 80

Service

Redirect "https://gojira"

End

End

## Redirect all requests on port 443 to the Play
Framework webapp on port 9443

ListenHTTPS

Address 0.0.0.0

Port 443

Cert
"/var/work/sslDemo/conf/ssl/selfSigned.keystore.pem"

HeadRemove "X-Forwarded-Proto"

AddHeader "X-Forwarded-Proto: https"

Service

BackEnd

Address 127.0.0.1

Port 9443

End

End

End

Suggestions?

Thanks,

Mike

--
To unsubscribe send an email with subject unsubscribe to
[email protected] .
Please contact [email protected] for questions.

--
To unsubscribe send an email with subject unsubscribe to [email protected]
Please contact [email protected] for questions.