1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

Configure Apache to send SSL Client certificate to backend server

Discussion in 'Apache' started by luffy wallis, Dec 31, 2013.

  1. #1
    Hi All;
    i want to configure Apache so that it receives a client certificate, an passes it to another server.
    I'm using:
    - apache 2.0.65 on windows
    - the backend server is an apache-based solution (IBM HTTP Server)
    I tried this config:
    <VirtualHost *:443>
    ServerName apacheserver.domain.com
    SSLEngine on
    SSLProxyEngine on
    SSLCertificateFile "e:/Apache/Apache2/conf/server.cer"
    SSLCertificateKeyFile "e:/Apache/Apache2/conf/server.key"
    SSLCACertificateFile  "e:/Apache/Apache2/conf/certca.cer"
    SSLVerifyClient require
    SSLVerifyDepth 2
    ProxyPreserveHost on
    ProxyRequests off
    <Proxy *>
    AddDefaultCharset Off
    Order deny,allow
    Allow from all
    </Proxy>
    # initialize the special headers to a blank value to avoid http header forgeries
    RequestHeader set SSL_CLIENT_S_DN    ""
    RequestHeader set SSL_CLIENT_I_DN    ""
    RequestHeader set SSL_SERVER_S_DN_OU ""
    RequestHeader set SSL_CLIENT_VERIFY  ""
    <Directory />
    # add all the SSL_* you need in the internal web application
    RequestHeader set SSL_CLIENT_S_DN "%{SSL_CLIENT_S_DN}e"
    RequestHeader set SSL_CLIENT_I_DN "%{SSL_CLIENT_I_DN}e"
    RequestHeader set SSL_SERVER_S_DN_OU "%{SSL_SERVER_S_DN_OU}e"
    RequestHeader set SSL_CLIENT_VERIFY "%{SSL_CLIENT_VERIFY}e"
    ProxyPass  https://192.168.10.191/
    ProxyPassReverse  https://192.168.10.191/
    </Directory>
    </VirtualHost>
    Code (markup):
    when i try this config, i have this error on the error.log file of apache:
    any ideas?
     
    luffy wallis, Dec 31, 2013 IP
  2. tolisd

    tolisd Peon

    Messages:
    224
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Have you upload on server the ssl files ?

    1. SSLCertificateFile "e:/Apache/Apache2/conf/server.cer"
    2. SSLCertificateKeyFile "e:/Apache/Apache2/conf/server.key"
    3. SSLCACertificateFile "e:/Apache/Apache2/conf/certca.cer"
     
    tolisd, Jan 18, 2014 IP