Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-12 Thread Rajesh Cherukuri
Alex below config seems to be working now , the only difference i see between my earlier conf and below config is location of these values , (proxyvia on , proxy requests on) , and disabling of SSLProxyEngine On Thanks for all your help on this *Working Config * Listen 172.16.130.2:8080

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-11 Thread Alexandru Duzsardi
If you want to proxy to google.com or any host , just leave out the stanza from the config I would recommend to start only with the absolutely necessary config and expand from there. That means that for a https forward proxy config you only need this vhost config + the required modules:

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-11 Thread Rajesh Cherukuri
hi Could you try any of the HTTP urls , i am not sure why it is n't working for me i can see that you are proxying to 192.IP ,but on mine i still get connection abort when it try with below configuration and when tried cul with option --proxy-insecure that option dosen't seems to be available

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Alexandru Duzsardi
Just tested this setup , out of pure boredom and it works as expected (ubuntu 16.04) Proxy server modules needed to enable: ssl,proxy,proxy_connect Proxy Config (n1: virtualhost) ErrorLog error.log SSLEngine on SSLCertificateFile

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Rajesh Cherukuri
Eric In that case if it uses connect over http , do you think this would be the reason why i get below in the error logs then i am not sure why would the HTTP urls fail with 400 band request SSL Library Error: error:1407609B:SSL routines:SSL23_GET_CLIENT_HELLO *:https proxy request --

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Rajesh Cherukuri
i still get connection abort >> >

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Mike Maiorana
Rajesh, Try this: curl -I -x 172.16.130.2:443 https://example.com Still SSL to example.com, but using the http proxy on port 443. Still encrypted. Mike M. On Tue, Apr 10, 2018 at 8:34 AM, Eric Covener wrote: > On Tue, Apr 10, 2018 at 8:10 AM, Rajesh

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Eric Covener
On Tue, Apr 10, 2018 at 8:10 AM, Rajesh Cherukuri wrote: > Eric > > So you mean to say that i can't use a browser that has proxy configuration > as apache HTTPS forwarding proxy and then use it to connect to http and > https urls ? I'm saying if you configure a browser to

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Rajesh Cherukuri
Eric So you mean to say that i can't use a browser that has proxy configuration as apache HTTPS forwarding proxy and then use it to connect to http and https urls ? On Tue, Apr 10, 2018 at 12:42 PM, Eric Covener wrote: > On Tue, Apr 10, 2018 at 7:41 AM, Stefan Eissing >

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Eric Covener
On Tue, Apr 10, 2018 at 7:41 AM, Stefan Eissing wrote: > I advice to debug this step-by-step. First the SSL connection to your Apache. > Then the proxy setup. Then any restrictions with "Require...". +1. It appears curl is using HTTP to talk to your proxy, like a

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Stefan Eissing
I advice to debug this step-by-step. First the SSL connection to your Apache. Then the proxy setup. Then any restrictions with "Require...". > Am 10.04.2018 um 13:31 schrieb Rajesh Cherukuri : > > > configured HTTPS on 8080 port and here is the request sent to HTTP and

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Rajesh Cherukuri
configured HTTPS on 8080 port and here is the request sent to HTTP and HTTPS found two things by running curl with --insecure 1.) for all HTTP requests i get 400 bad requests as response 2.) for all HTTPS requests i get HTTP/1.1 400 Bad Request below is the output curl --insecure -I -x

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Alexandru Duzsardi
Have you tried curl --insecure -I -x ... ? since curl probably doesn't trust your ssl-cert On Tue, 2018-04-10 at 11:29 +0200, Stefan Eissing wrote: > Does your curl report any answer from the Apache or does it just lose > the connection? Try 'curl -v -D - ...' maybe for more details. > > > Am

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Stefan Eissing
Does your curl report any answer from the Apache or does it just lose the connection? Try 'curl -v -D - ...' maybe for more details. > Am 10.04.2018 um 11:12 schrieb Rajesh Cherukuri : > > HI > > i am not looking for end to end encryption , all i want to do is make apache

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Rajesh Cherukuri
HI i am not looking for end to end encryption , all i want to do is make apache a forwordproxy configured on SSL and accpect HTTPS and proxy the urls based on the ACL's' below is my Vhost configuration where i have a forward proxy which is configured to allow only to example.com when i

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Stefan Eissing
> Am 10.04.2018 um 10:24 schrieb Rajesh Cherukuri : > > hi > > thanks for the info , wanted to know if there is a way we can configure SSL > on a apache forword proxy so that the communication between the client > (browser) to the Proxy server is encrypted Not sure

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Rajesh Cherukuri
hi thanks for the info , wanted to know if there is a way we can configure SSL on a apache forword proxy so that the communication between the client (browser) to the Proxy server is encrypted

Re: [users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Nick Kew
> On 10 Apr 2018, at 07:31, Rajesh Cherukuri wrote: > > HI > > I am looking for some help in configuring a forward proxy , the proxy has to > listing on HTTPS port , clients needs to.connect. to proxy using https .and > below is how i wanted this to work , This won’t

[users@httpd] Apache2.4 forward proxy ssl between client and proxy server

2018-04-10 Thread Rajesh Cherukuri
HI I am looking for some help in configuring a forward proxy , the proxy has to listing on HTTPS port , clients needs to.connect. to proxy using https .and below is how i wanted this to work , 172.16.130.2:443 (forwordproxy)--->https://example.com when i tried to access this with below