Greeting

I'm having a problem with Apache-SSL reverse proxy to a backend server.
In the error log, it shows multiple of these messages:

[Tue Aug 19 16:07:57 2008] [error] (20014)Error string not specified
yet: proxy: pass request body failed to xxx.xxx.xxx.xxx:8080
(yyy.yyy.com)
[Tue Aug 19 16:07:57 2008] [error] (20014)Error string not specified
yet: proxy: pass request body failed to xxx.xxx.xxx.xxx:8080
(yyy.yyy.com) from <IP address> ()

Here is the snippet of conf:

<VirtualHost zzz.zzz.zzz.zzz:443>
    DocumentRoot "/zzz"
    ServerName yyy.yyy.com
    Options None

    SSLProxyEngine on
    ProxyRequests Off
    ProxyVia On

    ProxyPass / https://xxx.xxx.xxx.xxx:8080/
    ProxyPassReverse / https://xxx.xxx.xxx.xxx:8080/

    SetEnv force-proxy-request-1.0 1
    SetEnv proxy-nokeepalive 1

    SSLEngine on
    SSLProtocol all -TLSv1
    SSLCipherSuite ALL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
    SSLCertificateFile /etc/ssl.crt/zzz.cert.pem
    SSLCertificateKeyFile /etc/ssl.key/zzz.key.pem
    SSLCertificateChainFile /etc/ssl.crt/ca.cert.pem

    SSLCACertificateFile /etc/ssl.crt/ca.cert.pem
    SSLVerifyDepth 1
    SSLVerifyClient require
    SSLOptions +FakeBasicAuth

    SetEnvIf User-Agent ".*MSIE.*" \
         nokeepalive ssl-unclean-shutdown \
         downgrade-1.0 force-response-1.0

    <Proxy *>
      SSLRequireSSL
      SSLRequire %{SSL_CLIENT_I_DN_CN} eq "..." \
             and %{SSL_CLIENT_S_DN_CN} eq "..."
      Order Allow,Deny
      Allow from all
    </Proxy>
</VirtualHost>


The problem seems happening intermittently and "kill -1 <pid>" seems resolving
the problem temporarily.

Has anyone came across this problem before?

Appreciate for all comments and help.


cheers,

myocella

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: [EMAIL PROTECTED]
   "   from the digest: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to