Re: [apache-ssl] How to make ProxyPass work?

[Rob Moser <moser@unsw.edu.au>]

In response to my query about getting ProxyPass to work, Ben Laurie wrote:
>We've used it, and it works for us.

and Victor wrote:
>Well, it does work (for me at least it worked). Here is what I have
[Victor's config snipped]

Good to know it works then, and that somebody is using it; I'd hate to be
chasing wild geese here.  I compared my config to yours Victor, and the
only difference is that you've set your ProxyPass up in a VirtualHost
directive while I have not (I want this particular Apache server to
re-route EVERYTHING.)  Is this necessary?

When first I asked this question I sent along what I thought to be the
relevant bits of my config file, which people have mostly said looks all
right.  This makes me suspect that I'm a lousy judge of whats relevant...
I've also got a couple of snippets from people's configs that seem to match
mine fairly closely, so I'm wondering about the snipped bits.  Would anyone
who is successfully using ProxyPass be willing to send me your whole config
file (with any hostnames or other private info snipped, of course)?  I'd
just like to check and see where else we might differ.  

Alternately, I've attached my entire config below (sans comments) and would
love advice; I just figured asking anyone to read through the whole thing
was a bit much.  Again, the server is starting up fine but requests to
https://server:443 just drop me into /usr/local/apache/htdocs as if
ProxyPass weren't set.  Is there a conflict with my <Directory /> or
DocumentRoot settings?  Do I need to set those at all if I'm using
ProxyPass / <elsewhere>?

Thanks for any help you can give me,

	- rob.

SSLNoCAList
SSLRandomFile /dev/entropy 1024
SSLRandomFilePerConnection /dev/entropy 1024

ServerType standalone
ServerRoot "/usr/local/apache"
PidFile /usr/local/apache/logs/httpsd.pid
ScoreBoardFile /usr/local/apache/logs/httpsd.scoreboard
ResourceConfig /dev/null
AccessConfig /dev/null
Timeout 300
KeepAlive On
MaxKeepAliveRequests 100
KeepAliveTimeout 15

MinSpareServers 5
MaxSpareServers 10
StartServers 5
MaxClients 150
MaxRequestsPerChild 0

Port 443
User www
Group daemon
ServerAdmin moser@comms.unsw.edu.au
ServerName server.comms.unsw.edu.au

DocumentRoot "/usr/local/apache/htdocs"

<Directory />
    Options FollowSymLinks
    AllowOverride None
</Directory>

TransferLog logs/transfer_log

SSLCacheServerPath /usr/local/apache/bin/gcache
SSLCacheServerPort logs/gcache_port
SSLCacheServerRunDir /tmp
SSLSessionCacheTimeout 15
SSLCertificateFile /usr/local/apache/certs/httpsd.pem
SSLCertificateKeyFile /usr/local/apache/certs/httpsd.pem
SSLVerifyClient 3
SSLVerifyDepth 10
SSLFakeBasicAuth
SSLBanCipher NULL-MD5:NULL-SHA

<Directory "/usr/local/apache/htdocs">
SSLRequireSSL
    Options Indexes FollowSymLinks MultiViews
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

<IfModule mod_dir.c>
    DirectoryIndex index.html
</IfModule>

AccessFileName .htaccess

<Files ~ "^\.ht">
    Order allow,deny
    Deny from all
</Files>

UseCanonicalName On

<IfModule mod_mime.c>
    TypesConfig /usr/local/apache/conf/mime.types
</IfModule>

DefaultType text/plain

<IfModule mod_mime_magic.c>
    MIMEMagicFile /usr/local/apache/conf/magic
</IfModule>

HostnameLookups Off

ErrorLog /usr/local/apache/logs/httpsd_error_log
LogLevel debug
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\""
combine
d
LogFormat "%h %l %u %t \"%r\" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent
CustomLog /usr/local/apache/logs/httpsd_access_log common
CustomLog       logs/ssl_log "%t %{version}c %{cipher}c %{clientcert}c"

ServerSignature On

<IfModule mod_proxy.c>
    ProxyRequests On
    ProxyPass / http://server.comms.unsw.edu.au:8053/
    ProxyPassReverse / http://server.comms.unsw.edu.au:8053/
</IfModule>