[z/OS][AIX Solaris HP-UX Linux Windows]

Setting up a reverse proxy configuration with SSL

This topic describes how to set up a site to act as a reverse proxy for a resource that is hosted on a secure site.

About this task

The following steps describe how to configure the server to act as reverse proxy to a non-WebSphere HTTPS origin server.

This configuration is unsupported when IBM® HTTP Server is bundled with WebSphere Application Server.

Procedure

  1. Configure www.example.com similar to the following example:
    <VirtualHost *:80>
    ServerName host1
    SSLProxyEngine On
    KeyFile "c:/program files/ibm http server/clientkey.kdb"
    ProxyPass /ssl/password.html https://internal.example.com/password.html
    </VirtualHost>
  2. Configure internal.example.com similar to the following example:
    <VirtualHost *:443>
    SSLEnable
    KeyFile "c:/program files/ibm http server/serverkey.kdb"
    </VirtualHost>

Results

When a browser requests https://www.example.com/ssl/password.html, IBM HTTP Server makes a connection to internal.example.com using SSL. If internal.example.com requires a client certificate, IBM HTTP Server uses the default certificate of the KeyFile for which it is configured.