小编Raj*_*j M的帖子

Apache反向代理背后的自签名证书问题?

我理解这个主题在几篇较旧的帖子中进行了讨论,特别 是自签名证书是否会在Apache反向代理之后工作?由@Ryan发布

我面临同样的问题,但无法绕过它.我在Apache HTTP服务器前面将Apache 2.4.12设置为反向代理.我在代理服务器上有有效的证书,但在Oracle HTTP服务器上有自签名的证书.目标是一直执行https,但是每当浏览器到达myhost.domain时,它都会抛出一个证书警告(因为自签名证书).在Oracle HTTP服务器上拥有正式证书不是一种选择,用户浏览器受到限制,因此无法忽略自签名证书警告.

这是我的虚拟主机


LogLevel ERROR
ServerName  myhost.domain
ServerAlias  xxx.xxx.xxx.xx
DocumentRoot D:/xyz/pubdocs
SSLEngine      On
SSLProxyEngine On
SSLCertificateFile      certs/myserver.crt
SSLCertificateKeyFile   certs/myserver.key
SSLCertificateChainFile certs/myserver_chain.crt
SSLProxyCACertificateFile certs/my_self_signed.pem
SSLProxyVerify none
SSLProxyCheckPeerName off
SSLProxyCheckPeerCN off
SSLProxyCheckPeerExpire off
SSLProtocol    -all +TLSv1
SSLProxyProtocol +SSLv3 +TLSv1 +TLSv1.1
#SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!NULL:RC4+RSA:+HIGH:+MEDIUM
ErrorLog "logs/abc-error.log"
CustomLog "logs/abc-access.log" cert

ProxyRequests Off  
# IE compatibility
Header set X-UA-Compatible "IE=EmulateIE8"
# Prevent page from being loaded within an IFrame (Cross-Frame Scripting protection)
Header always append X-Frame-Options SAMEORIGIN
# Prevent mime …
Run Code Online (Sandbox Code Playgroud)

apache ssl proxy

8
推荐指数
1
解决办法
8893
查看次数

标签 统计

apache ×1

proxy ×1

ssl ×1