I have a legacy application running on an aging Weblogic server. I have noticed that newer SSL certificates does not play well with my old Java and I though of setting up an offload server to handle the requests I do over https to retrieve customer data.
What I am trying to accomplish is to set up a new server that should serve as a https to http tunnel and I was thinking of setting up paths on that server that corresponds to my customers in the following manner:
- Weblogic calls the bridge server with the URL /cust01/path-to-data.
- The bridge then calls the customer's server, using SSL, with the same path to data
- The server returns that to Weblogic
Same thing for cust02 and so forth. This would probably require a table of all customers, their alias ("cust02") and the corresponding external URL.
Another way, but here I must admit I am at a total loss, would be to keep the URL from Weblogic but somehow switch http... to https... when it goes through the intermediate server.
I have experimented with apache2 and the mod_proxy but am not sure that I got it right. So far I have managed to pipe local address "foo" to Google but the problem is that the browser I use for testing shows the google page but also changes the URL. It seems as if I get transferred to google and when I tried to access a file on the remote server, I got an error.
What is the easiest way to accomplish this? Is Apache the right tool or should I search somewhere else?
stunnel
to do so. If you have to understand HTTP (within the SSL pipe), and act accordingly (eg: you have several backend servers, and you want to be able to direct the connection according to some rule, URL or cookie or whatever), then you'll need a reverse proxy (like Apache mod_proxy). Keep in mind that in all cases, you'll lose the direct visibility of the client IP address on your backend servers.