Skip to the content
Documentation
Help Start
Reading in:
  • German: 9,059 of 9,059 pages
About the help in other languages
All help pages

Support for SSL Proxies

Sometimes it is more pratical to just deliver SSL request through a generic proxy. This can be the case for development issues or wildcard mass hosting. For determing the usage of a SSL proxy we evaluate a server…

Download as PDF

Address: https://doc.exponential.earth/exphelp/viewer/features/3.10/ssl_proxy_support.txt

*Title: Support for SSL Proxies

*Documentation:
Sometimes it is more pratical to just deliver SSL request through a generic proxy. 
This can be the case for development issues or wildcard mass hosting.
For determing the usage of a SSL proxy we evaluate a server variable "HTTP_X_FORWARDED_SERVER" set by webserver.
The value of "HTTP_X_FORWARDED_SERVER" is the value of "ServerName" of the origin virtual host.
The setting is controlled by [SiteSettings].SSLProxyServerName with default value "localhost".

Examples:

Generic SSL Proxy for Apache

LoadModule ssl_module modules/mod_ssl.so 
<IfModule mod_ssl.c>
Listen 443
NameVirtualHost *:443
<VirtualHost *:443>

        ServerAdmin webmaster@localhost
        ServerName localhost

        DocumentRoot /workspace

        SSLEngine on
        SSLCertificateFile C:\workspace\conf\ssl\certs\ca.cer
        SSLCertificateKeyFile C:\workspace\conf\ssl\keys\ca.key

        # security
        SSLProtocol -ALL +SSLv3 +TLSv1
        SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

        SetEnvIf User-Agent ".*MSIE.*" \
        nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0

        RewriteEngine on
        RewriteRule ^/(.*) http://%{HTTP_HOST}/$1 [P,L]
</VirtualHost>
</IfModule>

Something wrong on this page? Report an error

Documentation license

This page was inherited from the documentation of the original software. It is not covered by the GNU Free Documentation License; it is distributed under the GNU General Public License, version 2.

Copyright (C) 1999 - 2014 eZ Systems AS and contributors