[users@httpd] Removing backend server from ProxyBalancer

2016-08-10 Thread Mohanavelu Subramanian
Hi All, we are using mod_proxy, mod_proxy_balancer as LB. I have a use case to dynamically remove the BalancerMember from ProxyBalancer. I am arrived with 2 approaches. But I got some doubt in approach 2. Approach 1: First shutdown the backend server which is added as BalancerMember in apache,

[users@httpd] Apache as both Reverse and Forward Proxy

2016-08-05 Thread Mohanavelu Subramanian
Hi All, Currently, we are using apache as reverse proxy server. We have a new use case, where clients would send their callback endpoint to our backend server for long running tasks. Then after completing the long running task, the server would use the client's callback endpoint to send the

Re: [users@httpd] Disable apache web server not to accept any new requests from clients

2016-08-03 Thread Mohanavelu Subramanian
orkingonit.html > > > > 2016-08-02 7:07 GMT+02:00 Mohanavelu Subramanian <mhnv...@gmail.com>: > >> Hi All, >> >> In our project, we are using Apache server as load balancer(mod_proxy) >> with many instances of tomcat containers as backend. &

[users@httpd] Disable apache web server not to accept any new requests from clients

2016-08-01 Thread Mohanavelu Subramanian
Hi All, In our project, we are using Apache server as load balancer(mod_proxy) with many instances of tomcat containers as backend. I have a scenario where we need to have an option for Activate/De-activate traffic in apache server. In case of de-activate scenario, apache server should not

Re: [users@httpd] Apache as forward and reverse proxy

2016-07-14 Thread Mohanavelu Subramanian
Hi Nick, Thanks a lot for the inputs. Could you please the share some configuration for the same, if you have any for reference. Thanks & Regards, Mohan On 14-Jul-2016 4:00 pm, "Nick Kew" <n...@webthing.com> wrote: > On Thu, 2016-07-14 at 14:48 +0530, Mohan

[users@httpd] Apache as forward and reverse proxy

2016-07-14 Thread Mohanavelu Subramanian
Hi All, I want to configure apache server to act as both forward and reverse proxy. The official doc says "Apache can be configured in both a forward and reverse proxy mode." But there is also another statement "In a typical reverse proxy configuration, this option ProxyRequests Directive

[users@httpd] Asynchronous callback from tomcat

2016-07-13 Thread Mohanavelu Subramanian
Hi All, Good morning. Our application is deployed on tomcat. We have apache load balancer and tomcat container running on separate virtual machines. We got a requirement to implement asynchronous callback for long running tasks from client. So, with this feature client would send soap request

Re: [users@httpd] Two way SSL authentication between apache proxy server and tomcat

2016-05-31 Thread Mohanavelu Subramanian
rote: > To make tomcat evaluate the SSL_CLIENT_CERT , you must configure a > SSLValve, see: > https://tomcat.apache.org/tomcat-7.0-doc/api/org/apache/catalina/valves/SSLValve.html > > > > David Balažic > > Software Engineer > > www.comtrade.com > > > > *From:*

[users@httpd] Two way SSL authentication between apache proxy server and tomcat

2016-05-30 Thread Mohanavelu Subramanian
Hi All, Good Morning. I want to implement 2 way SSL authentication between apache proxy and tomcat. I am using mod_proxy to integrate apache and tomcat. I have some doubts in the implementation. I have done some initial analysis on this. I would create a self-signed CA certificate(CA.crt). I

[users@httpd] Secured connection between Apache Httpd and Tomcat over AJP protocol

2016-05-25 Thread Mohanavelu Subramanian
Hi All, Good Morning. I have Httpd process and Tomcat instances both running on 2 different machines. The communication between them happens through AJP protocol (mod_jk) which doesnt support encryption. But we are using some features of mod_jk like automatic passing of security information like

[users@httpd] Adding Tomcat instances dynamically to Apache Load Balancer without restart

2016-04-06 Thread Mohanavelu Subramanian
Hi All, Good Morning. I am working in a Cloud based project where I encounter Scale-in/ Scale out of Tomcat instances. We have Apache load balancer as well. The requirement is to dynamically add any new Tomcat instances during scale out to Load balancer and remove tomcat instances during

Re: [users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-27 Thread Mohanavelu Subramanian
the procedures to be followed for building a rpm for apache version 2.2.31 Thanks Regards, Mohan On Sun, Aug 23, 2015 at 12:51 PM, Mohanavelu Subramanian mhnv...@gmail.com wrote: Hi Jeff, Thanks a lot and I try to compile as per the link. Regards, Mohan On Sun, Aug 23, 2015 at 11:33 AM

Re: Re[2]: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Mohanavelu Subramanian
you. -- Original Message -- From: Mohanavelu Subramanian mhnv...@gmail.com To: users@httpd.apache.org; Sterpu Victor vic...@caido.ro Sent: 8/23/2015 10:19:13 AM Subject: Re: [users@httpd] SSL - How client certificates are verified? Hi, With the option SSLVerifyClient require

Re: [users@httpd] SSL - How client certificates are verified?

2015-08-23 Thread Mohanavelu Subramanian
Hi, With the option SSLVerifyClient require , server mandates the client to send its certificate for authentication. Then the server verifies this client certificate against the CA certificate file configured in apache. If the client certificate has been signed by a valid CA, then the

Re: [users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-23 Thread Mohanavelu Subramanian
The above link shows how to do that. On Friday, August 14, 2015, Mohanavelu Subramanian mhnv...@gmail.com wrote: Hi Daniel, Thanks a lot for the reply. I have downloaded the apache 2.2.31 source code and tried compiling it. But I end up getting many dependency issues. Also I searched

Re: [users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-14 Thread Mohanavelu Subramanian
to correctly use the openssl version you want to use. Apache will allow you to use tlsv1.2 when the openssl version it was compiled against supports it. 2015-08-11 21:01 GMT+02:00 Mohanavelu Subramanian mhnv...@gmail.com: Hi All, Good Morning. I am to new Apache Users mailing list. I have

[users@httpd] Apache Web Server rpm(2.2.x) for Linux OS to support TLSv1.2

2015-08-11 Thread Mohanavelu Subramanian
Hi All, Good Morning. I am to new Apache Users mailing list. I have described the issue I am facing to support TLSv1.2 Currently, our product use Apache 2.2.12 provided by SLES 11sp3. We are doing a securing hardening now by enabling only TLSv1.2 protocol and disabling other protocols. I tried