Re: [users@httpd] Re: reverse proxy choice to origin servers: https-https or https-http

2014-02-13 Thread Thomas Eckert
If you use httpd as reverse proxy then clients will perform SSL handshakes with your reverse proxy. In SSL there is no distinction between decrypting the HTTP headers only or decrypting the full HTTP request - it's simply payload and it will be decrypted as a whole. If you want to understand how

[users@httpd] Re: reverse proxy choice to origin servers: https-https or https-http

2014-02-10 Thread Jakub Moscicki
Is it true that if proxy is setup https-http then it only has to decrypt/encrypt the headers and the body is encrypted/decrypted on the backend? What ? Eh, no. If you configure your frontend with https and your backends with http, then you just told apache to NOT use SSL between mod_proxy and