For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Fred_Zandvliet_'s avatar
Fred_Zandvliet_
Icon for Nimbostratus rankNimbostratus
Jun 10, 2015

SSL Offloading

Hello,

I hope someone can help me. We took the ssl offloading from the webserver to our BigIp. Ik get the normal https pages working but i can't get the tomcat proxypass working.

My Apache config is:


  RewriteEngine On
  RewriteLogLevel 0
  RewriteCond %{REQUEST_URI} !^/web/
  RewriteRule ^/(.*)\.htm$ /web/$1.htm [P,L]



ProxyPass         /web/ ajp://localhost:8009/web/ ttl=600
ProxyPassReverse  /web/ ajp://localhost:8009/web/

When i try to access a tomcat page i get a 404 Page not found, pages on the same webservers what only uses https works fine..

Anyone any idea what i'm doing wrong?

Greetings, Fred

4 Replies

  • Scott_Hopkins's avatar
    Scott_Hopkins
    Icon for Nimbostratus rankNimbostratus
    Jun 10, 2015

    You might not be able to depending on your ajp config. Is your ajp config set to secure=true?

     

  • Fred_Zandvliet_'s avatar
    Fred_Zandvliet_
    Icon for Nimbostratus rankNimbostratus
    Jun 11, 2015

    Hi Scott,

     

    Thank you for your reply.

     

    My ajp config wasn't set to secure=tre, but I have set it now.

     

     

    Is did what you mean?

     

    Greetings, Fred

     

  • Fred_Zandvliet_'s avatar
    Fred_Zandvliet_
    Icon for Nimbostratus rankNimbostratus
    Jun 11, 2015

    Connector port="8009" enableLookups="false" protocol="AJP/1.3" secure="true" URIEncoding="UTF-8" maxThreads="256" connectionTimeout="600000" /

     

  • Fred_Zandvliet_'s avatar
    Fred_Zandvliet_
    Icon for Nimbostratus rankNimbostratus
    Jun 11, 2015

    After I put secure="true" in the ajp config is still get a "File does not exist:" in the error_log in Apache. So it seems that the proxypass to tomcat still isn't working.