Making a two way SSL authentication between apache httpd reverse proxy and Tomcats

apache tomcat ssl mod-proxy
Scis picture Scis · Jul 4, 2012 · Viewed 16.4k times · Source

I have an Apache HTTPD working as a reverse proxy, and Tomcat(6.0.35) server(s), what I'm trying to achieve is that there will be mutual trust between the Tomcat server and the reverse proxy. Meaning that when reverse proxy forwards a request it will present it's own certificate that will be imported into Tomcat's truststore file thus making the Tomcat accept requests only when they really are made by the reverse proxy(and if possible maybe even check that the tomcat's certificate is a certain specific certificate). I have managed to setup a Tomcat that requires a client certificate and it works perfectly but the correct reverse proxy configuration seems to be eluding me.

Answer

Bruno picture Bruno · Jul 4, 2012

You should try the SSLProxyMachineCertificateFile option and point it to a file containing your client certificate and its (unencrypted) private key in PEM format.

Related questions

Apache HTTPD/mod_proxy/Tomcat and SSL with client auth

I'm sure this is an FAQ but I couldn't find anything I recognized as being the same question. I have several web-apps running in Tomcat, with some pages e.g. the login page protected by SSL as defined by confidentiality …

Read More
Error during SSL Handshake with remote server

I have Apache2 (listening on 443) and a web app running on Tomcat7 (listening on 8443) on Ubuntu. I set apache2 as reverse proxy so that I access the web app through port 443 instead of 8443. Besides, I need to have SSL communication …

Read More
Configure Apache SSL and then redirect to Tomcat with mod_jk

I'm trying to configure my home server to accept SSL Connection on port 443. I've www.mydomain.com domain, I've just linked Apache2 and Tomcat, using mod_jk, now I wish to accept also https request from the web. This is …

Read More