Hi,

Perhaps a little off-topic, but think it is still relevant.  Now our ca is
nearing completion we are thinking about setting up a pilot testsite. 

What we want to do is the following:

Outside <--> WebsiteA <-- |firewall| --> WebsiteB

We want our employees to be able to get to websiteB through our firewall
only through websiteA.

All webcommunication should be https.  WebsiteB (or more, the host serving
websiteB) only accepts connections on port 443 from the host that's serving
websiteA.

For http this is easily done, just compile mod_proxy in apache, set the
ProxyPass directive correctly and everything for websiteB goes through A. 
But with https a problem occurs, the communication is not entirely
finished.  It seems (after viewing what happens when connecting directly to
websiteB) the pieces that are not correctly displayed are those pieces that
are only displayed after websiteB has offered (and the normal browser has
accepted) its server certificate.  

The way I figure websiteA somehow has to be made aware there is a
certificate presented, or I am using the mod_proxy totally wrong (in which
case I apologize for posting this message here).  Can anyone shed some light
on this?

Jan
-- 
alive ~ true
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to