Mailing List Archive

[Bug 53612] Reverse Proxy causing 500 error SSL proxy 1.0.1c OpenSSL
https://issues.apache.org/bugzilla/show_bug.cgi?id=53612

Eric Covener <covener@gmail.com> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |NEEDINFO
OS| |All

--- Comment #1 from Eric Covener <covener@gmail.com> ---
you'll have to provide some details of the SSL connection between the two
servers if you want it looked at as a bug in Apache.

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 53612] Reverse Proxy causing 500 error SSL proxy 1.0.1c OpenSSL [ In reply to ]
https://issues.apache.org/bugzilla/show_bug.cgi?id=53612

--- Comment #2 from gibsonb@imsweb.com ---
Not sure exactly what you mean, but I will post the configurations I'm using
for the vhost:


<VirtualHost server:443>
ServerName arcgisproxy01dev
SSLEngine on
SSLProxyEngine on
SSLCertificateChainFile chain.crt
SSLCertificateFile site.crt
SSLCertificateKeyFile site.key
SSLOptions +StdEnvVars
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0
force-response-1.0
SetEnv proxy-initial-not-pooled 1
RewriteEngine on
RewriteCond %{HTTP_HOST} !^arcgisproxy01dev [nocase]
RewriteCond %{HTTP_HOST} !^$
RewriteRule ^/(.*) https://arcgisproxy01dev/$1 [redirect,last]
ProxyRequests off
# arcgis instance
ProxyPassMatch (?i)^/arcgis/services(.*)$
https://arcgis01dev/arcgis/services/$1
ProxyPassReverse /arcgis/services https://arcgis01dev/arcgis/services
ProxyPassMatch (?i)^/arcgis/rest(.*)$ https://arcgis01dev/arcgis/rest/$1
ProxyPassReverse /arcgis/rest https://arcgis01dev/arcgis/rest
ProxyPassMatch (?i)^/arcgis/sdk/rest(.*)$
https://arcgis01dev/arcgis/sdk/rest/$1
ProxyPassReverse /arcgis/sdk/rest https://arcgis01dev/arcgis/sdk/rest
ProxyPassMatch (?i)^/arcgis/tokens(.*)$ https://arcgis01dev/arcgis/tokens/$1
ProxyPassReverse /arcgis/tokens https://arcgis01dev/arcgis/tokens
ProxyPassMatch (?i)^/arcgis/server/proxyoutput/(.*)$
https://arcgis01dev/proxyoutput/$1
ProxyPassReverse /arcgis/server/proxyoutput/ https://arcgis01dev/proxyoutput/
ProxyPassMatch (?i)^/arcgis/server/proxycache/(.*)$
https://arcgis01dev/proxycache/$1
ProxyPassReverse /arcgis/server/proxycache/ https://arcgis01dev/proxycache/
ProxyPassMatch (?i)^/arcgis/server/proxyjobs/(.*)$
https://arcgis01dev/proxyjobs/$1
ProxyPassReverse /arcgis/server/proxyjobs/ https://arcgis01dev/proxyjobs
# public instance
ProxyPassMatch (?i)^/public/services(.*)$
https://arcgis01dev/public/services/$1
ProxyPassReverse /public/services https://arcgis01dev/public/services
ProxyPassMatch (?i)^/public/rest(.*)$ https://arcgis01dev/public/rest/$1
ProxyPassReverse /public/rest https://arcgis01dev/public/rest
ProxyPassMatch (?i)^/public/sdk/rest(.*)$
https://arcgis01dev/public/sdk/rest/$1
ProxyPassReverse /public/sdk/rest https://arcgis01dev/public/sdk/rest
ProxyPassMatch (?i)^/public/tokens(.*)$ https://arcgis01dev/public/tokens/$1
ProxyPassReverse /public/tokens https://arcgis01dev/public/tokens
ProxyPassMatch (?i)^/public/server/proxyoutput/(.*)$
https://arcgis01dev/proxyoutput/$1
ProxyPassReverse /public/server/proxyoutput/ https://arcgis01dev/proxyoutput/
ProxyPassMatch (?i)^/public/server/proxycache/(.*)$
https://arcgis01dev/proxycache/$1
ProxyPassReverse /public/server/proxycache/ https://arcgis01dev/proxycache/
ProxyPassMatch (?i)^/public/server/proxyjobs/(.*)$
https://arcgis01dev/proxyjobs/$1
ProxyPassReverse /public/server/proxyjobs/ https://arcgis01dev/proxyjobs
DocumentRoot /prj/web/arcgisproxy01dev/htdocs
<Directory /prj/web/arcgisproxy01dev/htdocs>
Options FollowSymLinks Includes
AllowOverride All
Order allow,deny
Allow from all
SSL</Directory>
ScriptAlias /cgi-bin/ /prj/web/arcgisproxy01dev/cgi-bin/
<Directory /prj/web/arcgisproxy01dev/cgi-bin>
AllowOverride AuthConfig Limit
Options None
Order allow,deny
Allow from all
SSLRequire %{SSL_CIPHER_USEKEYSIZE} >= 128
</Directory>
ErrorLog ssl_error_log
CustomLog ssl_access_log combined
</VirtualHost>

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 53612] Reverse Proxy causing 500 error SSL proxy 1.0.1c OpenSSL [ In reply to ]
https://issues.apache.org/bugzilla/show_bug.cgi?id=53612

--- Comment #3 from Eric Covener <covener@gmail.com> ---
presumably there's a new SSL behavior over the wire, you'll have to capture it
with e.g. ssldump and provide loglevel debug that corresponds to it

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 53612] Reverse Proxy causing 500 error SSL proxy 1.0.1c OpenSSL [ In reply to ]
https://issues.apache.org/bugzilla/show_bug.cgi?id=53612

--- Comment #4 from Rainer Jung <rainer.jung@kippdata.de> ---
Shootin from the hip: Could it be

http://rt.openssl.org/index.html?q=2811

which was fixed after the OpenSSL 1.0.1c release in

http://cvs.openssl.org/chngview?cn=22565

Regards,

Rainer

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org