Topic: Apache SSL working with 2003 server but not with 2008R2

[astrophyster]

Hi,

I have strange problem configuring Apache SSL on windows 2008R2 server.

I have Application WAR file deployed on windows 2003 and 2008R2 servers on weblogic 10.3.5.

Now am configuring Apache as web server with SSL(using openssl).

Apache version: httpd-2.2.22-win32-x86-openssl-0.9.8t.msi

I have added the mod_wl_22.so into modules folder.

My requirement is

Client----HTTPS----Apache-----HTTP----weblogic

So SSL is only till apache.

I have generated a self signed certificate using openssl to test this setup.

I installed apache on windows 7 machine and configured the SSL.
If i point the location to the deployment done on 2003 server, SSL works fine. But if i point the deployment to 2008R2 then i get the Application login page. From there if i click on any link it just gives the login page again. But in the Apache access logs i can see the request is going but response is either 301,302 or 404.

I configured Apache SSL on 2008R2 where weblogic is installed. Got the same problem.

To confirm the weblogic deployment is working correctly, i accessed the direct weblogic url and application works perfectly fine on both 2003 and 2008R2 servers.

Here is my apache ssl configuration

I just modified the httpd-ssl.conf file to below settings.

<VirtualHost *:443>
DocumentRoot "C:/Program Files/Apache Software Foundation/Apache2.2/htdocs"
ServerName local.test.com
ServerAdmin admin@test.com
ErrorLog "C:/Program Files/Apache Software Foundation/Apache2.2/logs/error.log"
TransferLog "C:/Program Files/Apache Software Foundation/Apache2.2/logs/access.log"

<location />
WebLogichost 192.168.1.88
weblogicport 7074
</location>

SSLEngine on

SSLProtocol SSLv3
SSLHonorCipherOrder on
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:MEDIUM:!aNULL:!MD5
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5
SSLCertificateFile "C:/Program Files/Apache Software Foundation/Apache2.2/conf/server.crt"
SSLCertificateKeyFile "C:/Program Files/Apache Software Foundation/Apache2.2/conf/server.key"

<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "C:/Program Files/Apache Software Foundation/Apache2.2/cgi-bin">
SSLOptions +StdEnvVars
</Directory>

BrowserMatch "MSIE [2-5]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog "C:/Program Files/Apache Software Foundation/Apache2.2/logs/ssl_request.log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>

I checked the inbound and outbound rules for 2008R2 for port 80 and 443. Nothing is blocked. Infact firewall is disabled on both the servers.

Any guidance will be helpful.

Regards,
SandeepM

[James Blond]

I'm wondering if setting WLProxySSL to ON in the plugin configuration would help.

[astrophyster]

Hi,

Tried that also but didn't work.

One more thing is all win2003 servers are 32bit with 32bit weblogic installed where ssl is working fine.

But win2008R2 machines are 64bit version with 64bit weblogic installed.

But apache installed on win2008R2 machines are 32bit version. But i guess this is not the problem.

I downloaded the 64 bit version apache from apacheLounge but the mod_wl_22.so which comes with weblogic is not getting compiled with apache. Am getting error when i run httpd -t command, saying not valid win32 application.

Any help.

Regards,
SandeepM

[James Blond]