我使用apache mod_proxy將代理轉換爲後端HTTPS服務器正在使用非標準端口(由多個防火牆阻止,以避免需要一個反向代理)。Apache向https站點提供反向代理(70014)找到文件結尾:
客戶端連接是通過HTTPS到apache,然後inturn連接到我應該是nginx或tomcat服務器(後端服務器是一個Zimbra郵件服務器管理控制檯)。
我收到以下錯誤日誌中
[Thu Jun 27 11:35:26 2013] [debug] mod_proxy_http.c(56): proxy: HTTP: canonicalising URL //[internal_url]:7071/
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(1506): [client [client_ip] proxy: https: found worker https://[internal_url]:7071/ for https://[internal_url]:7071/
[Thu Jun 27 11:35:26 2013] [debug] mod_proxy.c(968): Trying to run scheme_handler against proxy
[Thu Jun 27 11:35:26 2013] [debug] mod_proxy_http.c(1973): proxy: HTTP: serving URL https://[internal_url]:7071/
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(1949): proxy: HTTPS: retrying the worker for ([internal_url])
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(1955): proxy: HTTPS: worker for ([internal_url]) has been marked for retry
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2011): proxy: HTTPS: has acquired connection for ([internal_url])
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2067): proxy: connecting https://[internal_url]:7071/ to [internal_url]:7071
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2193): proxy: connected https://[internal_url]:7071/ to [internal_url]:7071
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2444): proxy: HTTPS: fam 2 socket created to connect to [internal_url]
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2285): proxy: CONNECT: sending the CONNECT request for [internal_url]:7071 to the remote proxy [internal_ip]:7071 ([internal_url])
[Thu Jun 27 11:35:26 2013] [error] (70014)End of file found: proxy: HTTPS: attempt to connect to [internal_url]:7071 via http CONNECT through [internal_ip]:7071 ([internal_url]) failed
[Thu Jun 27 11:35:26 2013] [error] ap_proxy_connect_backend disabling worker for ([internal_url])
[Thu Jun 27 11:35:26 2013] [debug] proxy_util.c(2029): proxy: HTTPS: has released connection for ([internal_url])
具有以下配置一個Ubuntu 12.10服務器 「的Apache2 2.2.22-6ubuntu2.2」 和「中的libapache2-MOD-代理上的HTML 「3.0.1-1.1」安裝包
ProxyRequests on
ProxyRemote * https://[internal_url]:7071
ProxyPass / https://[internal_url]:7071/
ProxyPassReverse / https://[internal_url]:7071/
ProxyPassReverseCookieDomain [internal_url] [external_url]
SSLProxyEngine on
ProxyPreserveHost on
ProxyVia on
我不知道我能做些什麼。後端服務器站點可以通過lynx從apache服務器訪問,所以對我來說這不是一個明顯的問題。
您的問題可能與CA證書有關。嘗試在ServerFault上查看Vortura答案以查看您的證書是否有效:[see here](http://serverfault.com/questions/516696/apache-proxy-ssl-authentication-failure-on-back-end-of-proxy -client-side)。你最好在StackExchange上問這個問題,它更相關。 –
你可以窺探TCP並查看客戶端的請求嗎?這樣,你至少可以發現連接正在建立,如果是,服務器是否返回任何東西。 – 2013-07-16 18:39:00