Request Tracker behind a reverse proxy. How?

Question

Apache HTTP Server

Rotary installed, ports 80 and 443 forwarded to 192.168.1.11
Debian8 and apache2 are installed on 1.11.
1.31 has debian8, apache2 and rt installed.
Inside the network everything works fine.
On 1.11, a file has been added to the Apache config:

[email protected]:/etc/apache2/sites-available# cat rt.domain.ru.conf
<VirtualHost *:80>
        ServerAdmin [email protected]
        ServerName rt.domain.ru
        ServerAlias www.rt.domain.ru
        SSLProxyEngine On
        #SSLCertificateFile     /etc/ssl/certs/ssl-cert-snakeoil.pem
        #SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
        SSLProxyCheckPeerCN on
        SSLProxyCheckPeerExpire on
        #ProxyRequests Off
        #ProxyPreserveHost On
        #ProxyVia full
        #<proxy *>
        #Order deny,allow
        #Allow from all
        #</proxy>
        ProxyPass / https://192.168.1.31/
        ProxyPassReverse / https://192.168.1.31/

        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>
# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

From the config you can see that I tried different options, but the error is always the same :(

Ошибка подключения SSL
ERR_SSL_PROTOCOL_ERROR

I don’t know much about questions, but there is a desire to figure it out ...
As I understand it, certificates from 1.31 are needed for 1.11, but I don’t understand which ones, I didn’t create anything when installing rt, but in that Apache config you can see that it seems to be using default ones

Answer 1

It is necessary to disable certificate verification on 1.11 if the certificates are self-signed. This is how I understand the problem.
Working config, if anyone needs it:

<VirtualHost *:443>
        DocumentRoot /var/www/www
        ServerAdmin [email protected]
        ServerName rt.domain.ru
        ServerAlias www.rt.domain.ru
        SSLEngine on
        SSLProtocol all -SSLv2
        SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
        SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem
        SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
        SSLProxyEngine on
        ProxyRequests Off
        SSLProxyVerify none
        SSLProxyCheckPeerCN off
        SSLProxyCheckPeerName off
        ProxyPreserveHost On
        ProxyPass / https://192.168.1.31/
        ProxyPassReverse / https://192.168.1.31/

        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
</VirtualHost>