Configure Apache to send SSL Client certificate to backend server

Discussion in 'Apache' started by luffy wallis, Dec 31, 2013.

  1. #1
    Hi All;
    i want to configure Apache so that it receives a client certificate, an passes it to another server.
    I'm using:
    - apache 2.0.65 on windows
    - the backend server is an apache-based solution (IBM HTTP Server)
    I tried this config:
    <VirtualHost *:443>
    ServerName apacheserver.domain.com
    SSLEngine on
    SSLProxyEngine on
    SSLCertificateFile "e:/Apache/Apache2/conf/server.cer"
    SSLCertificateKeyFile "e:/Apache/Apache2/conf/server.key"
    SSLCACertificateFile  "e:/Apache/Apache2/conf/certca.cer"
    SSLVerifyClient require
    SSLVerifyDepth 2
    ProxyPreserveHost on
    ProxyRequests off
    <Proxy *>
    AddDefaultCharset Off
    Order deny,allow
    Allow from all
    </Proxy>
    # initialize the special headers to a blank value to avoid http header forgeries
    RequestHeader set SSL_CLIENT_S_DN    ""
    RequestHeader set SSL_CLIENT_I_DN    ""
    RequestHeader set SSL_SERVER_S_DN_OU ""
    RequestHeader set SSL_CLIENT_VERIFY  ""
    <Directory />
    # add all the SSL_* you need in the internal web application
    RequestHeader set SSL_CLIENT_S_DN "%{SSL_CLIENT_S_DN}e"
    RequestHeader set SSL_CLIENT_I_DN "%{SSL_CLIENT_I_DN}e"
    RequestHeader set SSL_SERVER_S_DN_OU "%{SSL_SERVER_S_DN_OU}e"
    RequestHeader set SSL_CLIENT_VERIFY "%{SSL_CLIENT_VERIFY}e"
    ProxyPass  https://192.168.10.191/
    ProxyPassReverse  https://192.168.10.191/
    </Directory>
    </VirtualHost>
    Code (markup):
    when i try this config, i have this error on the error.log file of apache:
    any ideas?
     
    luffy wallis, Dec 31, 2013 IP
  2. tolisd

    tolisd Peon

    Messages:
    224
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Have you upload on server the ssl files ?

    1. SSLCertificateFile "e:/Apache/Apache2/conf/server.cer"
    2. SSLCertificateKeyFile "e:/Apache/Apache2/conf/server.key"
    3. SSLCACertificateFile "e:/Apache/Apache2/conf/certca.cer"
     
    tolisd, Jan 18, 2014 IP