[Modules] mod_proxy + mod_gnutls

gnd at itchybit.org gnd at itchybit.org
Tue Mar 1 07:42:27 EST 2011


Hello,

im trying to use mod_proxy together with mod_gnutls. My setup is like this:

<VirtualHost XXX:443>

        GnuTLSEnable on
        GnuTLSPriorities NORMAL
        DocumentRoot xxx
        ServerName xxx
        GnuTLSCertificateFile /etc/apache2/ssl.crt/xxx.crt
        GnuTLSKeyFile /etc/apache2/ssl.key/xxx.key
        ServerAdmin webmaster at xxx

        ProxyPass /  http://192.168.110.3/
        ProxyPassReverse / http://192.168.110.3/
</VirtualHost>

So behind the SSl-ed webserver there is a VPN tunnel leading to a
different server which i would like to proxy through apache. However this
doesnt work as i get a timeout and in the logs i see:

[Tue Mar 01 13:40:25 2011] [error] [client 192.168.110.3] GnuTLS:
Handshake Failed (-9) 'A TLS packet with unexpected length was received.'
[Tue Mar 01 13:40:25 2011] [error] (103)Software caused connection abort:
proxy: pass request body failed to 192.168.110.3:80 (192.168.110.3)
[Tue Mar 01 13:40:25 2011] [error] proxy: pass request body failed to
192.168.110.3:80 (192.168.110.3) from qqq.qqq.qqq.qqq ()

i guess this is similar to this debian bug:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=602957

When i try to proxy to https://192.168.110.3/ i get this warning:

[Tue Mar 01 13:25:26 2011] [error] [client 192.168.110.3] SSL Proxy
requested for xxx:80 but not enabled [Hint: SSLProxyEngine]
[Tue Mar 01 13:25:26 2011] [error] proxy: HTTPS: failed to enable ssl
support for 192.168.110.3:443 (192.168.110.3)

i would like to avoid using mod_ssl .. is there some way how to make my
config work ?

regards,

gnd/




More information about the Modules mailing list