I don't want my clients to negotiate an SSL connection with Apache web server, I want them to do so with the tomcat server behind it instead. How can I do so?
httpd.conf configuration is:
Listen 443 https SSLProxyEngine On ProxyPass / https://localhost:8443/ ProxyPassReverse / https://localhost:8443/ <VirtualHost _default_:443> SSLProxyEngine On ProxyPass / https://localhost:8443/ ProxyPassReverse / https://localhost:8443/ SSLEngine On SSLProtocol all -SSLv2 SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA SSLCertificateFile /etc/pki/tls/certs/localhost.crt SSLCertificateKeyFile /etc/pki/tls/private/localhost.key </VirtualHost>
It works, but not as I want. It seems the client is negotiating with apache, and apache web server with tomcat. (What I see is the apache web server self signed certificate)