BINGO !   You got it... I had taken the HTTPS statement out of the Service
section as it did not work for 2.4
I did not think of adding this once I upgraded to 2.5

Thanks for all the help... Now everything works like a charm !

You guys ROCK !

On Mon, Jan 10, 2011 at 3:48 PM, Joe Gooch <mrwiz...@k12system.com> wrote:

> Service
>    HeadRequire "Host:.*proxmox.mydomain.com.*"
>    BackEnd
>        Address 192.168.1.10
>        Port    443
>        HTTPS
>    End
> End
>
> If it already looks like that, post your config so we can look for other
> problems.
>
> Joe
>
> > -----Original Message-----
> > From: Nelson Pereira [mailto:kitkat0...@gmail.com]
>  > Sent: Monday, January 10, 2011 3:35 PM
> > To: pound@apsis.ch
> > Subject: Re: [Pound Mailing List] About https
> >
> > Even by upgrading to pound 2.5, it's still not working...
> >
> > Jan 10 20:31:05 pound pound: (b72c2b70) e500 can't read header
> > Jan 10 20:31:05 pound pound: (b72c2b70) e500 response error read from
> > 192.168.1.10:443/GET / HTTP/1.1: Success (0.002 secs)
> >
> > r...@pound:~# pound -V
> > starting...
> > Version 2.5
> >   Configuration switches:
> >     --enable-cert1l
> > Exiting...
> > r...@pound:~#
> >
> >
> >
> > On Mon, Jan 10, 2011 at 12:12 PM, Joe Gooch <mrwiz...@k12system.com>
> > wrote:
> >
> > > It appears ubuntu maverick has a pound 2.5 package.
> > >
> > > http://packages.ubuntu.com/source/maverick/pound
> > >
> > > Joe
> > >
> > > > -----Original Message-----
> > > > From: Joe Gooch [mailto:mrwiz...@k12system.com]
> > > > Sent: Monday, January 10, 2011 12:05 PM
> > > > To: pound@apsis.ch
> > >  > Subject: RE: [Pound Mailing List] About https
> > > >
> > > > You would need to pull a pound 2.5 deb package (for instance from
> > > > debian sid), or compile pound yourself.  (Or at least compile pound
> > and
> > > > replace the pound binary in /usr/sbin or wherever the package put
> > it)
> > > >
> > > > See http://www.apsis.ch/pound/index_html, installation section.
> > > >
> > > > Joe
> > > >
> > > >
> > > > > -----Original Message-----
> > > > > From: Nelson Pereira [mailto:kitkat0...@gmail.com]
> > > > > Sent: Monday, January 10, 2011 11:18 AM
> > > > > To: pound@apsis.ch
> > > > > Subject: Re: [Pound Mailing List] About https
> > > > >
> > > > > My version is :
> > > > >
> > > > > r...@pound:~# pound -V
> > > > > starting...
> > > > > Version 2.4.5
> > > > >   Configuration switches:
> > > > >     --enable-cert1l
> > > > >
> > > > >
> > > > > i installed using apt-get, how do I upgrade to 2.5c as apt-get
> > does
> > > > not
> > > > > have
> > > > > that release?
> > > > >
> > > > > NP
> > > > >
> > > > > On Mon, Jan 10, 2011 at 11:03 AM, Joe Gooch
> > <mrwiz...@k12system.com>
> > > > > wrote:
> > > > >
> > > > > > Support for HTTPS backends was added in Pound 2.5c.
> > > > > >
> > > > > > You configure in a backend group by using the HTTPS Directive.
> > > > From
> > > > > the
> > > > > > Pound manual page:
> > > > > >
> > > > > > BackEnd
> > > > > >       A back-end is a definition of a single back-end server
> > Pound
> > > > > will use
> > > > > > to reply to incoming requests.  All configuration directives
> > > > enclosed
> > > > > > between BackEnd and End
> > > > > >       are specific to a single service. The following
> > directives
> > > > are
> > > > > > available:
> > > > > >
> > > > > >       Address address
> > > > > >              The address that Pound will connect to. This can
> > be a
> > > > > numeric
> > > > > > IP address, or a symbolic host name that must be resolvable at
> > run-
> > > > > time. If
> > > > > > the name cannot be
> > > > > >              resolved to a valid address, Pound will assume
> > that it
> > > > > > represents the path for a Unix-domain socket. This is a
> > mandatory
> > > > > parameter.
> > > > > >
> > > > > >       Port port
> > > > > >              The port number that Pound will connect to. This
> > is a
> > > > > > mandatory parameter for non Unix-domain back-ends.
> > > > > >
> > > > > >       HTTPS [ "cert" ]
> > > > > >              The back-end is using HTTPS. If the optional
> > parameter
> > > > > cert is
> > > > > > specified, Pound will present this certificate to the back-end.
> > > > > >
> > > > > >       Priority val
> > > > > >              The  priority  of  this  back-end (between 1 and
> > 9, 5
> > > > is
> > > > > > default). Higher priority back-ends will be used more often
> > than
> > > > > lower
> > > > > > priority ones, so you should
> > > > > >              define higher priorities for more capable servers.
> > > > > >
> > > > > >       TimeOut val
> > > > > >              Override the global TimeOut value.
> > > > > >
> > > > > >       ConnTO val
> > > > > >              Override the global ConnTO value.
> > > > > >
> > > > > >       HAport [ address ] port
> > > > > >              A port (and optional address) to be used for
> > server
> > > > > function
> > > > > > checks. See below the "High Availability" section for a more
> > > > detailed
> > > > > >  discussion.  By  default
> > > > > >              Pound  uses the same address as the back-end
> > server,
> > > > but
> > > > > you
> > > > > > may use a separate address if you wish. This directive applies
> > only
> > > > > to non
> > > > > > Unix-domain servers.
> > > > > >
> > > > > >
> > > > > > Joe
> > > > > >
> > > > > >
> > > > > > > -----Original Message-----
> > > > > > > From: nelson pereira [mailto:kitkat0...@gmail.com]
> > > > > > > Sent: Sunday, January 09, 2011 9:51 PM
> > > > > > > To: pound@apsis.ch
> > > > > > > Subject: Re: [Pound Mailing List] About https
> > > > > > >
> > > > > > > does pound do https to https backend?
> > > > > > >
> > > > > > > I think this is something proxmox does not actualy do.. am i
> > > > wrong?
> > > > > > >
> > > > > > > Nelson
> > > > > > >
> > > > > > > On Jan 9, 2011, at 5:33 PM, Dave Steinberg wrote:
> > > > > > >
> > > > > > > > On 1/9/2011 5:25 PM, Nelson Pereira wrote:
> > > > > > > >> done that, and the service looks like this:
> > > > > > > >>
> > > > > > > >>         Service
> > > > > > > >>                 HeadRequire
> > "Host:.*proxmox.mydomain.com.*"
> > > > > > > >>                 BackEnd
> > > > > > > >>                         Address 192.168.1.10
> > > > > > > >>                         Port    443
> > > > > > > >>                 End
> > > > > > > >>         End
> > > > > > > >>
> > > > > > > >> Yet I keep getting the logs in syslog:
> > > > > > > >> can't read header
> > > > > > > >> e500 response error read from 192.168.1.10:443/GET /
> > HTTP/1.1:
> > > > > > > Success
> > > > > > > >> (0.001 secs)
> > > > > > > >>
> > > > > > > >> and then i get a page cannot be displayed.
> > > > > > > >
> > > > > > > > Try adding "HTTPS" to the backend directive.  I'm not 100%
> > sure
> > > > > of
> > > > > > > the syntax there, I think its literally a bareword as in:
> > > > > > > >
> > > > > > > > BackEnd
> > > > > > > >     Address 192...
> > > > > > > >     Port 443
> > > > > > > >     HTTPS
> > > > > > > > End
> > > > > > > >
> > > > > > > > That will tell pound to talk https to the backend.  I don't
> > use
> > > > > that
> > > > > > > myself so I can't advise precisely how it should look, but
> > play
> > > > > around
> > > > > > > with it or maybe check the archives to see if there are
> > examples.
> > > > > > > >
> > > > > > > > Regards,
> > > > > > > > --
> > > > > > > > Dave Steinberg
> > > > > > > > http://www.geekisp.com/
> > > > > > > > http://www.steinbergcomputing.com/
> > > > > > > > http://www.redterror.net/
> > > > > > > >
> > > > > > > > --
> > > > > > > > To unsubscribe send an email with subject unsubscribe to
> > > > > > > po...@apsis.ch.
> > > > > > > > Please contact ro...@apsis.ch for questions.
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > To unsubscribe send an email with subject unsubscribe to
> > > > > > > po...@apsis.ch.
> > > > > > > Please contact ro...@apsis.ch for questions.
> > > > > >
> > > > > > --
> > > > > > To unsubscribe send an email with subject unsubscribe to
> > > > > po...@apsis.ch.
> > > > > > Please contact ro...@apsis.ch for questions.
> > > > > >
> > > > >
> > > > >
> > > > > --
> > > > > To unsubscribe send an email with subject unsubscribe to
> > > > > po...@apsis.ch.
> > > > > Please contact ro...@apsis.ch for questions.
> > > >
> > > > --
> > > > To unsubscribe send an email with subject unsubscribe to
> > > > po...@apsis.ch.
> > > > Please contact ro...@apsis.ch for questions.
> > >
> > > --
> > > To unsubscribe send an email with subject unsubscribe to
> > po...@apsis.ch.
> > > Please contact ro...@apsis.ch for questions.
> > >
> >
> >
> > --
> > To unsubscribe send an email with subject unsubscribe to
> > po...@apsis.ch.
> > Please contact ro...@apsis.ch for questions.
>
> --
> To unsubscribe send an email with subject unsubscribe to po...@apsis.ch.
> Please contact ro...@apsis.ch for questions.
>


--
To unsubscribe send an email with subject unsubscribe to po...@apsis.ch.
Please contact ro...@apsis.ch for questions.

Reply via email to