Hello,
I have a problem with client certificate authentication on Apache configured as a reverse proxy. I have followed your tricks to do client certificate authentications behind a reverse proxy and it doesn't work for me. Here is a short description of my problem:
Jun 07, 2020 Compile Apache HTTP 2.4.5 with SSL module; Get SSL Certificate; Configure Apache to support SSL; Install Apache with SSL from Source. To configure SSL, Apache HTTP must be compiled with modssl. I’ll use CentOS 7 VM from Digital Ocean to demonstrate this. Login to Linux server with root and download the latest version of Apache. So I switched ports and below is the configuration that eventually got my reverse proxy to https into apache and http to my Nexus repo. Nexus returns a webpage with http links that break getting the content for that page but I only need the SSL for a docker daemon which won't be asking for webpages. Aug 08, 2017 Whereas HTTPS is the secure version of HTTP, where the ‘S‘ at the end stands for ‘Secure‘. Using HTTPS, all data between your browser and the web server are encrypted thus secure. This tutorial will show you how to redirect HTTP to HTTPS on Apache HTTP server in Linux.
Internet (http/https)⇒ Apache 2 (RP) Server (https)⇒ IIS Server
The client authentication works on the RP but the certificate informations aren't forwaded to the IIS Server. Here is the configuration of the apache vhosts:
I would be very grateful if you could give me a piece of advice…Thanks
sebastien
- Apache HttpClient Tutorial
- Apache HttpClient Resources
- Selected Reading
Apache Proxy Convert Http To Https
In this chapter, we will learn how to create a HttpRequest authenticated using username and password and tunnel it through a proxy to a target host, using an example.
Step 1 - Create a CredentialsProvider object
The CredentialsProvider Interface maintains a collection to hold the user login credentials. You can create its object by instantiating the BasicCredentialsProvider class, the default implementation of this interface.
Step 2 - Set the credentials
You can set the required credentials to the CredentialsProvider object using the setCredentials() method. This method accepts two objects −
AuthScope object − Authentication scope specifying the details like hostname, port number, and authentication scheme name.
Credentials object − Specifying the credentials (username, password). Set the credentials using the setCredentials() method for both host and proxy as shown below.
Step 3 - Create an HttpClientBuilder object
Create a HttpClientBuilder using the custom() method of the HttpClients class as shown below −
Step 4 - Set the CredentialsProvider
You can set the CredentialsProvider object to a HttpClientBuilder object using the setDefaultCredentialsProvider() method. Pass the previously created CredentialsProvider object to this method.
Step 5 - Build the CloseableHttpClient
Build the CloseableHttpClient object using the build() method.
What Is A Proxy Server
Step 6 - Create the proxy and target hosts
Create the target and proxy hosts by instantiating the HttpHost class.
Step 7 - Set the proxy and build a RequestConfig object
Create a RequestConfig.Builder object using the custom() method. Set the previously created proxyHost object to the RequestConfig.Builder using the setProxy() method. Finally, build the RequestConfig object using the build() method.
Step 8 - Create a HttpGet request object and set config object to it.
Create a HttpGet object by instantiating the HttpGet class. Set the config object created in the previous step to this object using the setConfig() method.
Step 9 - Execute the request
Execute the request by passing the HttpHost object (target) and request (HttpGet) as parameters to the execute() method.
Example
Following example demonstrates how to execute a HTTP request through a proxy using username and password.
Output
On executing, the above program generates the following output −