Forum

RequireTLS not working on reverse proxy

Fred
22 June 2016, 14:11
Hi Hugo,

I have Hiawatha reverse proxy in front of Apache.
In Apache, we only accept https request.. So I set my Hiawatha VirtualHost like this
VirtualHost {
Hostname = www.mydomain.co.uk, mydomain.co.uk
WebsiteRoot = /var/www/empty
RequireTLS = yes,31536000
TLScertFile = /usr/local/etc/hiawatha/ssl/mydomain.co.uk.key
ExecuteCGI = no
PreventXSS = yes
PreventCSRF = yes
PreventSQLi = yes
RandomHeader = 512
ReverseProxy .* https://91.203.xx.xxx:443 30 keep-alive
AccessLogfile = /var/log/hiawatha/mydomain.access.log
ErrorLogfile = /var/log/hiawatha/mydomain.error.log
}

When I go to mydomain.co.uk on http, I get message 'This page cannot be found'
WHen I go to mydomain.co.uk via https, I have no problem accessing the site.
Also nothing get log in /var/log/hiawatha/mydomain.error.log.

I have 9 other sites on the proxy all runing ok with the error login and RequireTLS option.
I only have problem with this one.

Any sugestion ?
Fred
Hugo Leisink
22 June 2016, 14:19
Hiawatha won't send the text 'This page cannot be found', so I guess it must have been sent by the application at the backend server. If that's true, I have no idea why it sends that message.
Fred
22 June 2016, 16:47
Well the test is standanrd Internet Explorer message isn't?
What about the log file been empty?
Hugo Leisink
23 June 2016, 09:37
Do the requests reach the backend webserver?
Fred
23 June 2016, 13:49
on HTTPS yes,
We haven't got HTTP 80 setup on backend webserver.
What I don't understand is why the HTTP url isn't getting rewritten in HTTPS using the RequireTLS option
Hugo Leisink
24 June 2016, 00:30
Can you tell me the real hostname of your website? I want to see it for myself.
Fred
24 June 2016, 11:08
Hi Hugo,
I just PM you all the details.

Thank you
This topic has been closed.