Re: SSL proxy issues

This is a multi-part message in MIME format.

------_=_NextPart_001_01C8BFDA.C6A527A7
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi, first time mailer but hoping for some good advice from experienced
users.

Basically Im looking to implement a solution that will redirect SSL
requests coming into my apache server (listening on 443) and forward
them on to a backend server.
I have reverse proxying setup but I cant seem to get it to work for
https connections.

At the moment using the current configuration, below, an http connection
coming into the server on port 80 can be redirected to the https site
configured.

But when I click on a login button on that site Im just getting a blank
screen on Firefox, with no errors showing in the logs?

Has anyone any ideas, cause Ive been looking into this for hours now?

Listen 8080

Listen 443

ServerName F00311.eircom.ie

<IfModule ssl_module>

SSLRandomSeed startup builtin

SSLRandomSeed connect builtin

</IfModule>

SSLProxyEngine on

ProxyPass / https://www.365online.com/

ProxyPassReverse / https://www.365online.com/

SSLSessionCache "shmcb:d:/Apache2.2/logs/ssl_scache(512000)"

SSLSessionCacheTimeout 300

<VirtualHost F00311.eircom.ie:443>

SSLEngine On

SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL

SSLCertificateKeyFile "D:\Apache2.2\conf\security\ca.key"

SSLCertificateFile "D:\Apache2.2\conf\security\ca.crt"

ServerName F00311.eircom.ie

SSLProxyEngine on

ProxyPass / https://www.365online.com/

ProxyPassReverse / https://www.365online.com/

SSLProxyVerify none

SSLProxyProtocol all

SSLProxyCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL

</VirtualHost>

************************************************************ ***
The information contained in this e-mail and any files transmitted
with it is confidential and may be subject to legal professional
privilege. It is intended solely for the use of the addressee(s).
If you are not the intended recipient of this e-mail, please note
that any review, dissemination, disclosure, alteration, printing,
copying or transmission of this e-mail and/or any file transmitted
with it, is prohibited and may be unlawful.
If you have received this e-mail by mistake, please promptly
inform the sender by reply e-mail and delete the material.
Whilst this e-mail message has been swept for the presence of
computer viruses, eircom does not, except as required by law,
represent, warrant and/or guarantee that the integrity
of this communication has been maintained nor that
the communication is free of errors, viruses, interception or
interference.

eircom Limited. Private Company Limited by Shares.
Registered in Dublin. Registration Number 98789.
Registered Office - 114 St. Stephen's Green West, Dublin 2.
************************************************************ ***

------_=_NextPart_001_01C8BFDA.C6A527A7
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.6000.16640" name=3DGENERATOR></HEAD>
<BODY>
<DIV>Hi, first=
time
mailer but hoping for some good advice from experienced
users.</DIV>
<DIV> </DIV>
<DIV>Basically=
Im looking
to implement a solution that will redirect SSL requests coming into my apac=
he
server (listening on 443) and forward them on to a backend
server.</DIV>
<DIV>I have re=
verse
proxying setup but I cant seem to get it to work for https
connections.</DIV>
<DIV> </DIV>
<DIV>At the mo=
ment using
the current configuration, below, an http connection coming into the server=
on
port 80 can be redirected to the https site configured.</DIV>
<DIV> </DIV>
<DIV>But when =
I click on
a login button on that site Im just getting a blank screen on Firefox, with=
no
errors showing in the logs?</DIV>
<DIV> </DIV>
<DIV>Has anyon=
e any
ideas, cause Ive been looking into this for hours now?</DIV>
<DIV> </DIV>
<DIV>
Listen 8080
Listen 443
ServerName F00311.eircom.ie
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>
SSLProxyEngine on
ProxyPass / https://www.365online.com/
ProxyPassReverse /
https://www.365online.com/
 
SSLSessionCache
"shmcb:d:/Apache2.2/logs/ssl_scache(512000)"
SSLSessionCacheTimeout 300
<VirtualHost F00311.eircom.ie:443><=
/P>
SSLEngine On
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL</FONT=
>
SSLCertificateKeyFile
"D:\Apache2.2\conf\security\ca.key"
SSLCertificateFile
"D:\Apache2.2\conf\security\ca.crt"
ServerName F00311.eircom.ie
SSLProxyEngine on
ProxyPass / https://www.365online.com/
ProxyPassReverse /
https://www.365online.com/
SSLProxyVerify none
SSLProxyProtocol all
SSLProxyCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL</FONT=
>
</VirtualHost></DIV>
<DIV> </DIV><pre>

***************************************************************
The information contained in this e-mail and any files transmitted
with it is confidential and may be subject to legal professional
privilege. It is intended solely for the use of the addressee(s).
If you are not the intended recipient of this e-mail, please note
that any review, dissemination, disclosure, alteration, printing,
copying or transmission of this e-mail and/or any file transmitted
with it, is prohibited and may be unlawful.
If you have received this e-mail by mistake, please promptly
inform the sender by reply e-mail and delete the material.
Whilst this e-mail message has been swept for the presence of
computer viruses, eircom does not, except as required by law,
represent, warrant and/or guarantee that the integrity
of this communication has been maintained nor that
the communication is free of errors, viruses, interception or
interference.

eircom Limited. Private Company Limited by Shares.
Registered in Dublin. Registration Number 98789.
Registered Office - 114 St. Stephen's Green West, Dublin 2.
***************************************************************
</pre></BODY></HTML>

------_=_NextPart_001_01C8BFDA.C6A527A7--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org