[Mod_nss-list] Problem with Apache reverse proxy and mod_nss

Liran ... reactor.leet at gmail.com
Thu Feb 3 09:50:17 UTC 2011


Hi
attached 2 configuration files, 1 for httpd.conf and nss.conf

I have a webserver that running on port 9090 that can accept SSL traffic

When I try to reach to this webserver through HTTPS, I see in nss_error.log
file this errors:
[Thu Feb 03 11:48:26 2011] [debug] mod_proxy_http.c(56): proxy: HTTP:
canonicalising URL //192.168.2.100:9090/basics.html
[Thu Feb 03 11:48:26 2011] [debug] proxy_util.c(1513): [client 192.168.1.81]
proxy: *: found reverse proxy worker for
https://192.168.2.100:9090/basics.html
[Thu Feb 03 11:48:26 2011] [debug] mod_proxy.c(993): Running scheme https
handler (attempt 0)
[Thu Feb 03 11:48:26 2011] [debug] mod_proxy_http.c(1940): proxy: HTTP:
serving URL https://192.168.2.100:9090/basics.html
[Thu Feb 03 11:48:26 2011] [debug] proxy_util.c(1999): proxy: HTTPS: has
acquired connection for (*)
[Thu Feb 03 11:48:26 2011] [debug] proxy_util.c(2055): proxy: connecting
https://192.168.2.100:9090/basics.html to 192.168.2.100:9090
[Thu Feb 03 11:48:26 2011] [debug] proxy_util.c(2153): proxy: connected
/basics.html to 192.168.2.100:9090
[Thu Feb 03 11:48:26 2011] [debug] proxy_util.c(2308): proxy: HTTPS: fam 2
socket created to connect to *
[Thu Feb 03 11:48:26 2011] [debug] proxy_util.c(2414): proxy: HTTPS:
connection complete to 192.168.2.100:9090 (192.168.2.100)
[Thu Feb 03 11:48:26 2011] [info] Connection to child 0 established (server
sssss:443, client 192.168.2.100)
[*Thu Feb 03 11:48:26 2011] [info] SSL library error -8181 writing data*
*[Thu Feb 03 11:48:26 2011] [info] SSL Library Error: -8181 Certificate has
expired*
[Thu Feb 03 11:48:26 2011] [error] (20014)Internal error: proxy: pass
request body failed to 192.168.2.100:9090 (192.168.2.100)
[Thu Feb 03 11:48:26 2011] [error] proxy: pass request body failed to
192.168.2.100:9090 (192.168.2.100) from 192.168.1.81 ()
[Thu Feb 03 11:48:26 2011] [debug] proxy_util.c(2017): proxy: HTTPS: has
released connection for (*)
[Thu Feb 03 11:48:26 2011] [debug] nss_engine_io.c(655): SSL connection
destroyed without being closed
[Thu Feb 03 11:48:26 2011] [info] Connection to child 0 closed (server
sssss:443, client 192.168.1.81)

I don't know why the APR thinks that the certificate has expired, it's
issued @ 2010 and the expiration date is 2016

Your help is needed, Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/mod_nss-list/attachments/20110203/34ba8d6d/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: httpd.conf
Type: application/octet-stream
Size: 34074 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/mod_nss-list/attachments/20110203/34ba8d6d/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nss.conf
Type: application/octet-stream
Size: 9818 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/mod_nss-list/attachments/20110203/34ba8d6d/attachment-0001.obj>


More information about the Mod_nss-list mailing list