Re: [OT] secure reverse proxy to my tomcat server HELP NEEDED

2014-03-05 Thread Jeff Haferman
André Warnier wrote: Jeff Haferman wrote: Jeff Top-Posting is not Bad because you have to scroll to the bottom to see what you're after Haferman wrote: [...] quote : A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A:

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread André Warnier
Hi. On this list, it is preferred (strongly) if you do not top-post, but respond in the text or below the question. It just makes it easier to follow what is going on. I have moved your previous response, to the logival order. Jeff Haferman wrote: Christopher Schultz wrote: -BEGIN PGP

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeff, On 3/3/14, 6:25 PM, Jeff Haferman wrote: What actually happens is that, just for https://my.webserver.com/, I get served the pages that are at the apache root, *not* what is being served by tomcat at port 8443. Ok. Let's take a look at

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread Jeff Haferman
Christopher Schultz wrote: Jeff, On 3/3/14, 6:25 PM, Jeff Haferman wrote: What actually happens is that, just for https://my.webserver.com/, I get served the pages that are at the apache root, *not* what is being served by tomcat at port 8443. Ok. Let's take a look at your original

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread Jeff Haferman
Jeff Top-Posting is not Bad because you have to scroll to the bottom to see what you're after Haferman wrote: Listen 80 ProxyRequests Off ProxyPreserveHost on VirtualHost *:80 ServerName my.webserver.com ProxyPass / http://my.webserver.com:8080/ ProxyPassReverse /

Re: [OT] secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread André Warnier
Jeff Haferman wrote: Jeff Top-Posting is not Bad because you have to scroll to the bottom to see what you're after Haferman wrote: [...] quote : A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most

secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
The subject says it, I need help getting a secure reverse proxy to my tomcat server working. There is a lot of doc on the web, and it seems like I have everything configured properly, but I can't quite get the reverse proxy to work on the https side of things. Here is my config: Apache2.4.2

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread J Java
Can you change and retry below lines : ProxyPass / http://my.webserver.com:8443/ toProxyPass / https://my.webserver.com:8443/ http://my.webserver.com:8443/ ProxyPassReverse /app http://localhost:8443/ to ProxyPassReverse /app https://localhost:8443/

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
Sorry, I made a couple of typos when I copied my stuff over and edited out my actual FQDN... I do have VirtualHost *:443 SSLEngine on SSLProxyEngine on SSLCertificateFile /path/to/server.crt SSLCertificateKeyFile /path/to/server.key ServerName my.webserver.com ProxyPass

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread André Warnier
Jeff Haferman wrote: The subject says it, I need help getting a secure reverse proxy to my tomcat server working. Maybe one question here would be : why ? browser --- HTTPS -- httpd -- HTTPS -- Tomcat The browser encrypts and sends to httpd. httpd decrypts. httpd then re-encrypts and sends

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
Yes, for development httpd and tomcat are on the same physical machine. Eventually they will be on different machines. But, even if I try browser --- HTTPS -- httpd -- HTTP -- Tomcat by just changing the ProxyPass and ProxyPassReverse directives to use the unencrypted URLs as follows

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeff, On 3/3/14, 5:11 PM, Jeff Haferman wrote: Yes, for development httpd and tomcat are on the same physical machine. Eventually they will be on different machines. But, even if I try browser --- HTTPS -- httpd -- HTTP -- Tomcat by just

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
Hi Chris - Sorry for the HELP NEEDED. What actually happens is that, just for https://my.webserver.com/, I get served the pages that are at the apache root, *not* what is being served by tomcat at port 8443. I do get the tomcat pages if I explicitly add the port, i.e.