List Info

Thread: CP behind Apache, converting from https to http




CP behind Apache, converting from https to http
country flaguser name
United States
2007-04-18 01:35:54
Hello all

I have a CP 2.2 server running behind an apache server,
using
mod_rewrite and mod_proxy. Since 2.2 doesn't yet have https
support,
I'm trying to use apache for the translation.

This all goes fine for serving content, but fails when
using
HTTPRedirects. I got it to work *almost* with using this in
the
cherrypy's config file:

[/]
base_url_filter.on: True
base_url_filter.use_x_forwarded_host: True

So, if I now launch a redirect in my app, it evaluates to
the correct
host, but with the http: scheme, instead of https.

This is the request I'm getting from the apache:

GET /login HTTP/1.1
Host: localhost:8888
Accept: */*
Accept-Language: de-ch,de;q=0.7,en-us;q=0.3
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1;
SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Cookie: session_id=be1baf7238e2ecabb067d3ad76deb9a89f108d21
Max-Forwards: 10
Via: 1.1 kps.eng.zkb.ch
X-Forwarded-For: 10.39.2.46
X-Forwarded-Host: kps.eng.zkb.ch
X-Forwarded-Server: kps.eng.zkb.ch
Connection: Keep-Alive

I can't really see how cherrypy could possibly know that it
should
redirect to https targets, so I guess I've not configured
the apache
correctly. This is what I'm doing:

<VirtualHost 192.168.80.11:443>
        ServerName kps.eng.zkb.ch:443
        RewriteEngine On
        ProxyRequests Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        RewriteRule ^(.*)$ http://localhost:8888$1
[P]

        [...]

        ServerSignature On

SSLEngine on
SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:
+SSLv2:+EXP:+eNULL
SSLCertificateFile /etc/apache2/ssl/server.crt
SSLCertificateKeyFile /etc/apache2/ssl/server.key

Am I doing something wrong?

Thanks a lot
Bernhard


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the
Google Groups "cherrypy-users" group.
To post to this group, send email to cherrypy-usersgooglegroups.com
To unsubscribe from this group, send email to
cherrypy-users-unsubscribegooglegroups.com
For more options, visit this group at h
ttp://groups.google.com/group/cherrypy-users?hl=en
-~----------~----~----~----~------~----~------~--~---


[1]

about | contact  Other archives ( Real Estate discussion Medical topics )