Apache, Tomcat & SSL: ProxyPass and ProxyPassReverse

Multi tool use
Multi tool use


Apache, Tomcat & SSL: ProxyPass and ProxyPassReverse



I'am having troubles configuring Apache, Tomcat and SSL, this is the scenario:



I have an Apache Web Server, running and working normally (but , I can access to this one just typing:


https://example.com



Also, in this host, I have a Tomcat running and working fine in port 8080 (HTTP); I've created a mini web-app which files are inside "test" directory, I can access typing:


http://example.com:8080/test



(I know that Apache is running in 80 port and Tomcat in 8080)



What I want to do is that througt Apache an user can access to 'test' (running on Tomcat) using HTTPS, I mean:


https://example.com/test



But when I access this link appers this:



Page not found



When I access using HTTP http://example/test works, but I need that be HTTPS.


http://example/test



I also create a file config in /etc/httpd/conf.d/vhost.conf, this is the content:


/etc/httpd/conf.d/vhost.conf


<VirtualHost *:80>
ServerName www.example.com
DocumentRoot /var/www/html
Redirect permanent / https://example.com/
</VirtualHost>

<VirtualHost *:443>
ServerName www.example.com
DocumentRoot /var/www/html

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/example.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/example.com/chain.pem

SSLProxyEngine on
ProxyPass /test http://xxx.xxx.xxx.xxx:8080/test
ProxyPassReverse /test http://xxx.xxx.xxx.xxx:8080/test
</VirtualHost>



xxx.xxx.xxx.xxx is the IP of website.



When I access the website https://example.com/ (with HTTPS) I got this issue (I use the web-app in the website):


https://example.com/



Security Overview



I use certificate Let's Encrypt (in the photo above).



I'm working with Apache/2.4.33 (Amazon) and Tomcat 8.5.29



Has anyone knows why or how solve this? Thanks in advance guys.



Log files:



access_log


yyy.yyy.yyy.yyy - - [01/Jul/2018:06:42:29 +0000] "GET /test HTTP/1.1" 301 245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36"
::1 - - [01/Jul/2018:06:42:51 +0000] "OPTIONS * HTTP/1.0" 200 - "-" "Apache/2.4.33 (Amazon) OpenSSL/1.0.2k-fips PHP/7.0.30 (internal dummy connection)"



error_log - empty



ssl_access_log


yyy.yyy.yyy.yyy - - [01/Jul/2018:06:42:29 +0000] "GET /test HTTP/1.1" 404 206
yyy.yyy.yyy.yyy - - [01/Jul/2018:06:42:29 +0000] "GET /test HTTP/1.1" 404 206
yyy.yyy.yyy.yyy - - [01/Jul/2018:06:42:49 +0000] "-" 408 -
yyy.yyy.yyy.yyy - - [01/Jul/2018:06:42:49 +0000] "-" 408 -
yyy.yyy.yyy.yyy - - [01/Jul/2018:06:42:49 +0000] "-" 408 -
yyy.yyy.yyy.yyy - - [01/Jul/2018:06:42:49 +0000] "-" 408 -



ssl_request_log


[01/Jul/2018:06:42:29 +0000] yyy.yyy.yyy.yyy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test HTTP/1.1" 206
[01/Jul/2018:06:42:29 +0000] yyy.yyy.yyy.yyy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test HTTP/1.1" 206
[01/Jul/2018:06:42:49 +0000] yyy.yyy.yyy.yyy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "-" -
[01/Jul/2018:06:42:49 +0000] yyy.yyy.yyy.yyy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "-" -
[01/Jul/2018:06:42:49 +0000] yyy.yyy.yyy.yyy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "-" -
[01/Jul/2018:06:42:49 +0000] yyy.yyy.yyy.yyy TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "-" -



ssl_error_log - empty



yyy.yyy.yyy.yyy = IP of my machine





there are three issues with the code which I have answered below.Have a look over them.
– Ankit Rastogi
Jul 1 at 4:47






Add ServerAlias example.com to both Virtual Host.
– Dusan Bajic
Jul 1 at 6:42


ServerAlias example.com




2 Answers
2



There are 4 problem with the code



First: Problem with the port.Https works on port 443 and http on port 80


port 443


port 80


<VirtualHost *:443>
ServerName www.example.com
DocumentRoot /var/www/html
###Remove this redirection line to move it in separate virtual host listening to port 80
Redirect permanent / https://example.com/
SSLProxyEngine on
ProxyPass /test http://xxx.xxx.xxx.xxx:8080/test
ProxyPassReverse /test http://xxx.xxx.xxx.xxx:8080/test
</VirtualHost>



Second: Not having SSLProxyEngine on so that proxy pass and proxy reverse pass works for https connection.


SSLProxyEngine on



Third: Remove the redirection rule of https from this virtual host to a new one.You need to create a new virtual host for port 80 in which there should be a redirect rule in which all http connections redirect to https permanently.


Redirect permanent / https://example.com/



Fourth: Also add below to all virtual host


ServerName example.com
ServerAlias www.example.com





First of all thank you very much for the answer. However it worked partially, I changed the file: /etc/httpd/conf.d/vhost.conf as you commented (I updated it in my question) I solved the HTTPS problem on page: https://example.com/ but the site https://example.com/test continues with the 'Not Found'
– Cava
Jul 1 at 6:11


/etc/httpd/conf.d/vhost.conf


https://example.com/


https://example.com/test





Did you removed the redirect permanent line from 443 port virtual host?
– Ankit Rastogi
Jul 1 at 6:20





Yes, I did. See my vhost.conf on my question, maybe help you.
– Cava
Jul 1 at 6:25


vhost.conf





From the access log of Apache you can identify from where "not found" is coming.Is it from the tomcat or Apache?Also check error.log too
– Ankit Rastogi
Jul 1 at 6:31



The result file /etc/httpd/conf.d/vhost.conf:


/etc/httpd/conf.d/vhost.conf


<VirtualHost *:80>
ServerName www.example.com
ServerAlias example.com
DocumentRoot /var/www/html
Redirect permanent / https://example.com/
</VirtualHost>

<VirtualHost *:443>
ServerName www.example.com
ServerAlias example.com
DocumentRoot /var/www/html

SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/example.com/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/example.com/chain.pem

SSLProxyEngine on
ProxyPass /test http://xxx.xxx.xxx.xxx:8080/test
ProxyPassReverse /test http://xxx.xxx.xxx.xxx:8080/test
</VirtualHost>






By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

4CZ,pQ,OrG9Ucxr5djZbSb8moz71BVqbRQ6YW5nha9usfd13 ylgL,qddLHTXj16BA8g8GDfyqv1TTWg1x H1,TeAz4q,Gcp
-
HiYl08 kWb2WgI2C7NtH

Popular posts from this blog

PySpark - SparkContext: Error initializing SparkContext File does not exist

Image
PySpark - SparkContext: Error initializing SparkContext File does not exist I have small piece code in PySpark, but I keep getting errors. I'm new to this so im not sure where to start. from pyspark import SparkContext, SparkConf conf = SparkConf().setAppName("Open json").setMaster("local[3]") sc = SparkContext(conf = conf) print("Done") I ran this in cmd with the command : spark-submit .PySparkOpen.py I then get the following error statement: C:UsersAbdullahDocumentsMaster Thesis>spark-submit .PySparkOpen.py 18/06/30 15:21:58 WARN NativeCodeLoader: Unable to load native-hadoop library for your platform... using builtin-Java classes where applicable 18/06/30 15:22:01 ERROR SparkContext: Error initializing SparkContext. java.io.FileNotFoundException: File file:/C:/Users/Abdullah/Documents/Master%20Thesis/PySpark/Open.py does not exist at org.apache.hadoop.fs.RawLocalFileSystem.deprecatedGetFileStatus(RawLocalFileSystem.java:611) at...
Read more

django NoReverseMatch Exception

django NoReverseMatch Exception I'm getting the following error while using hyperlink in Django. Error : django.urls.exceptions.NoReverseMatch: 'mywebapp' is not a registered namespace django.urls.exceptions.NoReverseMatch: 'mywebapp' is not a registered namespace mywebapp/template/about.html .. <body> <a href="{% url 'mywebapp:home' %}">Click here</a> Hello World!!!<p>Today is {{today}}</p> mywebapp/template/home.html .. <h4>Homepage.</h4> settings.py .. INSTALLED_APPS = [ ... 'mywebapp'#new ... ] Make sure you have app_name='home' in your mywebapp/urls.py . If that doesn’t solve the problem, then you need to show your urls.py . – Alasdair Jun 30 at 20:20 app_name='home' mywebapp/urls.py urls.py ...
Read more

Audio Livestreaming with Python & Flask

Audio Livestreaming with Python & Flask I'm currently strugling with my implementation of a simple live streaming web application using Python and Flask. It seems that I'm not able to stream my live recorded audio from the servers microphone input to the webpage. server.py from flask import Flask, render_template, Response import cv2 import framework import pyaudio import audio_processing as audioRec FORMAT = pyaudio.paInt16 CHANNELS = 1 RATE = 44100 CHUNK = 1024 audio = pyaudio.PyAudio() app = Flask(__name__) @app.route('/') def index(): """Video streaming home page.""" return render_template('index.html') # Stream routing @app.route('/video_feed') def video_feed(): """Video streaming route. Put this in the src attribute of an img tag.""" return Response(generateVideo(), mimetype='multipart/x-mixed-replace; boundary=frame') @app.route("/audio...
Read more