SSL Proxy / How to forward HTTPS connections?

SSL Proxy / How to forward HTTPS connections?

Secure Home | Search | About
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
SSL Proxy / How to forward HTTPS connections? fritz-bayer 08-12-2005
Posted by on August 12, 2005, 6:29 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

I have a question about forwarding HTTPS connections. I was wondering
whether or not SSL Proxies exist (Apache?) that allow forwarding HTTPS
connections to a different server?

The problem is that our webserver (on which our shop system resides)
runs on a ip address different to which our hostname resolves.

Here an example which describes our setup and makes the above said
clearer:

www.our-shop.de resolves to 212.45.27.78
Our webserver runs on 43.67.23.88

We run a transparent http proxy on 212.45.27.78, which forwards all
HTTP requests to 43.67.23.88. That works perfectly fine.

However, of course HTTPS connections fail. Is there any solution, which
allows us to also forward HTTPS connections to 43.67.23.88?

Fritz



Posted by Lassi Hippeläinen on August 12, 2005, 4:38 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
fritz-bayer@web.de wrote:

> Hello,
>
> I have a question about forwarding HTTPS connections. I was wondering
> whether or not SSL Proxies exist (Apache?) that allow forwarding HTTPS
> connections to a different server?
>
> The problem is that our webserver (on which our shop system resides)
> runs on a ip address different to which our hostname resolves.
>
> Here an example which describes our setup and makes the above said
> clearer:
>
> www.our-shop.de resolves to 212.45.27.78
> Our webserver runs on 43.67.23.88
>
> We run a transparent http proxy on 212.45.27.78, which forwards all
> HTTP requests to 43.67.23.88. That works perfectly fine.
>
> However, of course HTTPS connections fail. Is there any solution, which
> allows us to also forward HTTPS connections to 43.67.23.88?
>
> Fritz

Normal https concentrators terminate the SSL session and forward its
contents to the back-end server in the clear. The link between the proxy
and the server is secured by other means.

-- Lassi



Posted by Scott Lowe on August 13, 2005, 11:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
On 2005-08-12 09:29:18 -0400, fritz-bayer@web.de said:

> Hello,
>
> I have a question about forwarding HTTPS connections. I was wondering
> whether or not SSL Proxies exist (Apache?) that allow forwarding HTTPS
> connections to a different server?
>
> The problem is that our webserver (on which our shop system resides)
> runs on a ip address different to which our hostname resolves.
>
> Here an example which describes our setup and makes the above said
> clearer:
>
> www.our-shop.de resolves to 212.45.27.78
> Our webserver runs on 43.67.23.88
>
> We run a transparent http proxy on 212.45.27.78, which forwards all
> HTTP requests to 43.67.23.88. That works perfectly fine.
>
> However, of course HTTPS connections fail. Is there any solution, which
> allows us to also forward HTTPS connections to 43.67.23.88?
>
> Fritz

If I am not mistaken, you can use Apache's SSLProxyEngine directive to
terminate the inbound SSL connection, then establish another SSL
connection to the internal server. I'm using a similar functionality
with Apache passing data into an internal application server right now.

--
Scott Lowe



Similar ThreadsPosted
SSL Proxy / How to forward HTTPS connections? August 14, 2005, 7:14 am
https / proxy problem January 11, 2006, 10:59 am
Detect what software is blocking connections January 26, 2006, 11:51 am
Proxy June 15, 2005, 1:31 am
Hiding ip with proxy June 29, 2005, 7:35 am
Re: Know about a proxy server? January 2, 2007, 1:15 pm
Re: Know about a proxy server? January 2, 2007, 7:21 pm
Palm with anonymous proxy December 21, 2004, 10:30 pm
Auto Proxy Login?? Please help March 14, 2005, 4:39 am
Proxy sign messages July 26, 2005, 12:58 pm

The site map in XML format XML site map

Contact Us | Privacy Policy