[us...@httpd] Client certificate authentication on tunneling proxy

2010-01-20 Thread Andrei T
Hi, I am trying to figure out if it is possible to configure Apache (any version) so that it would work as a tunneling proxy for HTTPS servers such that it would also verify the client certificates used to access those servers. The goal is to protect servers on the internal network from unaut

Re: [us...@httpd] Client certificate authentication on tunneling proxy

2010-01-20 Thread Igor Cicimov
So you are trying to connect to port 80 on the server not 443? The SSL host listens to 443 so what do you expect to happen when you connect to port 80 as shown in your test? Have you redirected the port 80 to 443 in your configuration or what? You have also mentioned client certificates so have you

Re: [us...@httpd] Client certificate authentication on tunneling proxy

2010-01-20 Thread Andrei T
Igor Cicimov wrote: So you are trying to connect to port 80 on the server not 443? The SSL host listens to 443 so what do you expect to happen when you connect to port 80 as shown in your test? Have you redirected the port 80 to 443 in your configuration or what? I am trying to connect to ap

Re: [us...@httpd] Client certificate authentication on tunneling proxy

2010-01-27 Thread Matus UHLAR - fantomas
> Igor Cicimov wrote: >> So you are trying to connect to port 80 on the server not 443? The SSL >> host listens to 443 so what do you expect to happen when you connect to >> port 80 as shown in your test? Have you redirected the port 80 to 443 >> in your configuration or what? On 21.01.10 18:

Re: [us...@httpd] Client certificate authentication on tunneling proxy

2010-01-28 Thread Andrei T
Matus UHLAR - fantomas wrote: On 21.01.10 18:33, Andrei T wrote: I am trying to connect to apache through SSL (port 443) and tell it to create a tunnel to some other server listening on port 80. why a tunnel? Who would create the tunnel? While It's possible, I don't know of any browser that c

Re: [us...@httpd] Client certificate authentication on tunneling proxy

2010-01-28 Thread Andrei T
Andrei T wrote: I tried configuring apache as a tunneling proxy through https, but in this scenario apache would not recognize the CONNECT request and would not establish a tunnel to the target server. I actually found that this is a known issue with apache: https://issues.apache.org/bugzill

Re: [us...@httpd] Client certificate authentication on tunneling proxy

2010-01-28 Thread Matus UHLAR - fantomas
>> On 21.01.10 18:33, Andrei T wrote: >>> I am trying to connect to apache through SSL (port 443) and tell it >>> to create a tunnel to some other server listening on port 80. > Matus UHLAR - fantomas wrote: >> why a tunnel? Who would create the tunnel? While It's possible, I don't >> know of an