logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Reverse Proxy broken after libssl package upgrade
Author
swaitch



Joined: 01 Oct 2016
Posts: 2
Location: USA, Utah

PostPosted: Mon 03 Oct '16 17:02    Post subject: Reverse Proxy broken after libssl package upgrade Reply with quote

Hi All,

Apache 2.4.7
Ubuntu 14.04 LTS

I recently upgraded to the latest libssl1.0.0 package on a reverse proxy in my test environment. After doing so I am no longer able to access the intended web application.

error.log output: http://hastebin.com/juyojucali.js

Virtual Host config: http://hastebin.com/piheyosovu.apache

apt-cache policy libssl1.0.0 shows the following :
libssl1.0.0:
Installed: 1.0.1f-1ubuntu2.21
Candidate: 1.0.1f-1ubuntu2.21

If I restore the VM to a state prior to the upgrade and hold the libssl1.0.0 package, then install all available package upgrades, the reverse proxy continues to serve the requested application from an internal application server.

The internal application server on the other side of the proxy is a Windows 2008 server running Apache Tomcat.

The prior version of libssl is 1.0.1f-ubuntu2.8, which works without flaw.

Has anyone experienced this behavior?
Any suggestions as to what I can look at beyond logs?

As a side note, I am somewhat of a newb, so be gentle. Smile

Thanks!
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7354
Location: Germany, Next to Hamburg

PostPosted: Tue 11 Oct '16 21:25    Post subject: Reply with quote

The apache mod_proxy_connect is not compatible with that SSL Verion.

In such a case I compile apache myself

https://github.com/JBlond/debian_build_apache24/
Back to top
swaitch



Joined: 01 Oct 2016
Posts: 2
Location: USA, Utah

PostPosted: Wed 12 Oct '16 18:07    Post subject: Reply with quote

Thanks for the reply. I will look into compiling apache myself to see if that resolves the issue.

And thanks for the link!
Back to top


Reply to topic   Topic: Reverse Proxy broken after libssl package upgrade View previous topic :: View next topic
Post new topic   Forum Index -> Apache