SSL offloading with a mostly-plain-http website

Cantor, Scott cantor.2 at osu.edu
Tue Nov 1 22:04:21 EDT 2016


> Looks like HTTPS is only set by mod_ssl, and so it will be off when using SSL offload. 

I was merely speculating at how to verify the appropriate scheme is set, but that's irrelevant, the fix is ServerName.

I've tried
> 
>    SetEnvIf X-Forwarded-Proto https HTTPS=on

That is not the point of my suggestion. That is not how the virtualization happens, it's merely (apparently not accurate) evidence of it. I don't know if there's any other variable that reflects the scheme in effect. Internally, this is all handled with Apache request_rec fields and ServerName is how those fields get their values.

> So what I think you're saying is that I configure the virtual host as

I'm just telling you what the problem is, I'm no Apache expert.

I'm pretty sure your fundamental problem is overloading the vhosts. You can't use the same vhost for http and https, that simply won't work. You need one for each, and probably you need to point the load balancer at a separate port to trigger the second vhost and apply ServerName to it.

-- Scott



More information about the users mailing list