Hello,

 

We want to build the following configuration:

 

 BROWSER  ===SSL===> PROXY <=== SSL ===> SERVER

 

1/ The BROWSER runs on a Windows system

2/ The PROXY is an Apache server running on a Solaris system; it is configured as a reverse proxy

3/ The SERVER is an Apache Web Server under Solaris

 

Concerning the 2 SSL connections:

1/ The SSL connection between BROWSER and PROXY (as the arrow suggests) provides one-way authentication.  There is a server certificate at the side of the PROXY machine and no client certificate

2/ The SSL connection between PROXY and SERVER (as the arrows suggest) is a bi-lateral SSL connection.  There is a server certificate at the side of SERVER and a client certificate at the side of PROXY

 

I have 2 problems related to the PROXY-SERVER connection:

1/ How to generate a client SSL certificate for the PROXY?  How to install it in the PROXY?

2/ The PROXY needs a CA certificate in order to be able to check the SERVER certificate.  A CA certificate is very easy to install in the browser, but how to install this CA certificate in the PROXY?

 

Could you help us?

 

Thank you

 

Herman De Taeye

Reply via email to