Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to have an SSL Connection to an Apache server on port 443 which I want to use to proxy connections to a JBoss server on a different port.

The SSL certificates sit on the Jboss server not on the Apache server. Is it possible to redirect HTTPS traffic from Apache to the Jboss Server and have the JBoss server do the SSL handshake?

The Apache server must be able to redirect HTTPS traffic for two different URLS. One for a secure site. The other for access to web services. By the way I'm using it mutual authentication, if that makes any difference.

What does the Apache config file need to contain? or are there any good example of this out there?


share|improve this question
Would ProxyPass work for this situation? – Rick Apr 7 '10 at 11:50
No, ProxyPass wouldn't, since this happens during the processing of the HTTP request. The SSL/TLS hanshake and connection has to be established before any HTTP traffic is sent. It's not clear why you need two different URLs to be redirected to two different places: do you mean that what you call your secure site is running on one server and your web service running on another? – Bruno Sep 7 '10 at 22:54

The system that negotiates the SSL connection is going to be responsible for performing the keypair handshake.

If your clients are accessing the Apache server, it would serve the SSL certificate. The SSL certificate on JBoss would only be used by the Apache server, as it is the client in that case.

If you want the JBoss server to handle the SSL negotiation on the front-end, consider using NAT (or a PAT) to translate the ports.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.