Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

Reverse Proxy with SSL


Scar0ptics's Avatar
Member
0 0

have two web servers running Apache 2.4 on CentOS 7 and I am trying to set up a reverse proxy server for my web server. As of now, the proxy server is using a Let's Encrypt certificate, and when I access the proxy server before making changes to any virtual host configurations, I access the domain I have set up on the proxy and see a green lock in the upper left hand corner (no problems). I am using Firefox by the way.

Now, when I configure a virtual host to redirect the request to my web server, I get a web page with missing content (yellow exclamation point on the browser lock). My web browser appears to be blocking the images for my own protection, apparently. The proxy server appears to be redirecting my original request, which is good, but I am not seeing all the content load on-screen. It's likes it's been filtered out (it is) because the browser is just saying it's insecure because it is pulling content from another domain (which it is).

How can I solve this issue?

Here is my configuration for a virtual host:

<VirtualHost default:443>

General setup for the virtual host, inherited from global configuration

#DocumentRoot "/var/www/html" #ServerName www.example.com:443

Use separate log files for the SSL virtual host; note that LogLevel

is not inherited from httpd.conf.

ErrorLog logs/ssl_error_log TransferLog logs/ssl_access_log LogLevel warn

SSL Engine Switch:

Enable/Disable SSL for this virtual host.

SSLEngine on

ProxyRequests Off

ProxyPass / http://IP:80/ ProxyPassReverse / http://IP:80/

</virtualhost>

No one on Stack Overflow can figure this out.


Scar0ptics's Avatar
Member
0 0

I can get the proxy to pass, but the domain changes to another domain using HTTP instead of keeping HTTPS protocol.


Scar0ptics's Avatar
Member
0 0

I actually got this to work partially. The full PHP script is not working and I am extremely limited on what kind of content I can present on a web page. No one on Stack Overflow has a solution either.

hidden-network.ddns.net

Any Suggestions??