Re: [OT] secure reverse proxy to my tomcat server HELP NEEDED

2014-03-05 Thread Jeff Haferman
André Warnier wrote: > > Jeff Haferman wrote: >> Jeff "Top-Posting is not Bad because you have to scroll to the bottom to see >> what you're after" Haferman wrote: >> > [...] > > quote : > > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad t

Re: [OT] secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread André Warnier
Jeff Haferman wrote: Jeff "Top-Posting is not Bad because you have to scroll to the bottom to see what you're after" Haferman wrote: [...] quote : A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the mos

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread Jeff Haferman
Jeff "Top-Posting is not Bad because you have to scroll to the bottom to see what you're after" Haferman wrote: > > > Listen 80 > ProxyRequests Off > ProxyPreserveHost on > > > ServerName my.webserver.com > ProxyPass / http://my.webserver.com:8080/ > ProxyPassReverse / http://localhos

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread Jeff Haferman
Christopher Schultz wrote: > > Jeff, > > On 3/3/14, 6:25 PM, Jeff Haferman wrote: >> What actually happens is that, just for https://my.webserver.com/, >> I get served the pages that are at the apache root, *not* what is >> being served by tomcat at port 8443. > > Ok. Let's take a look at your orig

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeff, On 3/3/14, 6:25 PM, Jeff Haferman wrote: > What actually happens is that, just for https://my.webserver.com/, > I get served the pages that are at the apache root, *not* what is > being served by tomcat at port 8443. Ok. Let's take a look at

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-04 Thread André Warnier
Hi. On this list, it is preferred (strongly) if you do not top-post, but respond in the text or below the question. It just makes it easier to follow what is going on. I have moved your previous response, to the logival order. Jeff Haferman wrote: Christopher Schultz wrote: -BEGIN PGP

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
Hi Chris - Sorry for the "HELP NEEDED". What actually happens is that, just for https://my.webserver.com/, I get served the pages that are at the apache root, *not* what is being served by tomcat at port 8443. I do get the tomcat pages if I explicitly add the port, i.e. https://my.webserver.co

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Jeff, On 3/3/14, 5:11 PM, Jeff Haferman wrote: > Yes, for development httpd and tomcat are on the same physical > machine. Eventually they will be on different machines. But, even > if I try browser <--- HTTPS --> httpd <-- HTTP --> Tomcat by just >

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
Yes, for development httpd and tomcat are on the same physical machine. Eventually they will be on different machines. But, even if I try browser <--- HTTPS --> httpd <-- HTTP --> Tomcat by just changing the ProxyPass and ProxyPassReverse directives to use the unencrypted URLs as follows SS

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread André Warnier
Jeff Haferman wrote: The subject says it, I need help getting a secure reverse proxy to my tomcat server working. Maybe one question here would be : why ? browser <--- HTTPS --> httpd <-- HTTPS --> Tomcat The browser encrypts and sends to httpd. httpd decrypts. httpd then re-encrypts and send

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
Sorry, I made a couple of typos when I copied my stuff over and edited out my actual FQDN... I do have SSLEngine on SSLProxyEngine on SSLCertificateFile /path/to/server.crt SSLCertificateKeyFile /path/to/server.key ServerName my.webserver.com ProxyPass / https://my.webse

Re: secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread J Java
Can you change and retry below lines : ProxyPass / http://my.webserver.com:8443/ toProxyPass / https://my.webserver.com:8443/ ProxyPassReverse /app http://localhost:8443/ to ProxyPassReverse /app https://localhost:8443/

secure reverse proxy to my tomcat server HELP NEEDED

2014-03-03 Thread Jeff Haferman
The subject says it, I need help getting a secure reverse proxy to my tomcat server working. There is a lot of doc on the web, and it seems like I have everything configured properly, but I can't quite get the reverse proxy to work on the https side of things. Here is my config: Apache2.4.2 Ub