Answer the question
In order to leave comments, you need to log in
How to properly proxy an SSL site in Apache 2.4?
Hello.
There is the following config:
<VirtualHost *:80>
ServerName site.ru
ServerAlias my.site.ru
ProxyRequests Off
ProxyPreserveHost On
ProxyVia full
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
SSLProxyEngine on
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off
ProxyPass / https://192.168.1.250/
ProxyPassReverse / https://192.168.1.250/
</VirtualHost>
Answer the question
In order to leave comments, you need to log in
<VirtualHost *:443>
ServerName site.ru
ServerAlias my.site.ru
SSLEngine On
SSLCertificateFile "/usr/local/etc/apache24/my.site.ru/cert.pem"
SSLCertificateKeyFile "/usr/local/etc/apache24/my.site.ru/privkey.pem"
SSLCertificateChainFile "/usr/local/etc/apache24/my.site.ru/chain.pem"
ProxyRequests Off
ProxyPreserveHost On
SSLProxyEngine On
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
ProxyPass / https://192.168.1.250/
ProxyPassReverse / https://192.168.1.250/
</VirtualHost>
how-to with config examples for apache 2.4 - https://httpd.apache.org/docs/2.4/ssl/ssl_howto.html
In SSL certificates, the FQDN name is specified as the common name, but I don't see any technical restrictions from specifying it as common name IP addresses - https://support.globalsign.com/customer/portal/art...
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question