SSL Proxy / How to forward HTTPS connections?

Hello,

I have a question about forwarding HTTPS connections. I was wondering
whether or not SSL Proxies exist (Apache?) that allow forwarding HTTPS
connections to a different server?

The problem is that our webserver (on which our shop system resides)
runs on a ip address different to which our hostname resolves.

Here an example which describes our setup and makes the above said
clearer:

www.our-shop.de resolves to 212.45.27.78
Our webserver runs on 43.67.23.88

We run a transparent http proxy on 212.45.27.78, which forwards all
HTTP requests to 43.67.23.88. That works perfectly fine.

However, of course HTTPS connections fail. Is there any solution, which
allows us to also forward HTTPS connections to 43.67.23.88?

Fritz

fritz-bayer@web.de wrote:

> Hello,
>
> I have a question about forwarding HTTPS connections. I was wondering
> whether or not SSL Proxies exist (Apache?) that allow forwarding HTTPS
> connections to a different server?
>
> The problem is that our webserver (on which our shop system resides)
> runs on a ip address different to which our hostname resolves.
>
> Here an example which describes our setup and makes the above said
> clearer:
>
> www.our-shop.de resolves to 212.45.27.78
> Our webserver runs on 43.67.23.88
>
> We run a transparent http proxy on 212.45.27.78, which forwards all
> HTTP requests to 43.67.23.88. That works perfectly fine.
>
> However, of course HTTPS connections fail. Is there any solution, which
> allows us to also forward HTTPS connections to 43.67.23.88?
>
> Fritz

Normal https concentrators terminate the SSL session and forward its
contents to the back-end server in the clear. The link between the proxy
and the server is secured by other means.

-- Lassi

On 2005-08-12 09:29:18 -0400, fritz-bayer@web.de said:

> Hello,
>
> I have a question about forwarding HTTPS connections. I was wondering
> whether or not SSL Proxies exist (Apache?) that allow forwarding HTTPS
> connections to a different server?
>
> The problem is that our webserver (on which our shop system resides)
> runs on a ip address different to which our hostname resolves.
>
> Here an example which describes our setup and makes the above said
> clearer:
>
> www.our-shop.de resolves to 212.45.27.78
> Our webserver runs on 43.67.23.88
>
> We run a transparent http proxy on 212.45.27.78, which forwards all
> HTTP requests to 43.67.23.88. That works perfectly fine.
>
> However, of course HTTPS connections fail. Is there any solution, which
> allows us to also forward HTTPS connections to 43.67.23.88?
>
> Fritz

If I am not mistaken, you can use Apache's SSLProxyEngine directive to
terminate the inbound SSL connection, then establish another SSL
connection to the internal server. I'm using a similar functionality
with Apache passing data into an internal application server right now.

--
Scott Lowe