Apache

kongfranon · 08-24-2010, 08:09 AM

Only from internal lan. I have secondary IP address added for SSL site, and we are natting that address from that outside.

I can hit it if I change my hosts file to that local IP on the server itself, but when using external NAT address it never hits the server. But if you telnet to that external address with port 80 or 443 it works.

Is it something with my config?

Thanks

Here is a sample of my config with servername and ip addresses changed:

<VirtualHost 192.168.150.100:80>
ServerName sample.website.com
ServerAlias sample.website.com

RewriteEngine on
Redirect permanent / https://sample.website.com/

</VirtualHost>

<VirtualHost 192.168.150.100:443>
ServerName sample.website.com
ServerAlias sample.website.com
ErrorLog logs/sample.website.com-error-ssl.log
CustomLog logs/sample.website.com-access-ssl.log combined

RewriteEngine on
RewriteLog logs/sample.website.com_rewrite_log
RewriteLogLevel 0

ProxyRequests Off

RewriteCond %{HTTP_HOST} sample.website.com
RewriteRule ^/(.*) http://sample.different.com/$1 [P]

SSLEngine on
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
SSLCertificateFile /usr/local/ssl/sample.com.crt
SSLCertificateKeyFile /usr/local/ssl/sample.com.key

<Location />

SSLRequireSSL

SSLRequire %{SSL_CLIENT_S_DN_O} eq "sample"

SSLVerifyClient require

SSLVerifyDepth 1

SSLCACertificateFile /usr/local/apache2/ssl/sampleCA.crt

</Location>

</VirtualHost>

Thanks again in advance.

bathory · 08-24-2010, 11:51 AM

Hi,

You don't need the server's IP address. Use:

Code:

NameVirtualHost *:80
NameVirtualHost *:443

and change the vhosts accordingly:

Code:

<VirtualHost *:80>
ServerName sample.website.com
...
</VirtualHost>

<VirtualHost *:443>
ServerName sample.website.com
...
</VirtualHost>