I want to proxy requests from an SSL site via a non-SSL site. My Apache httpd.conf looks like this:

    ServerName foo.com
    ProxyPass / https://bar.com/

So, when I visit http://foo.com, I expect apache to make a request to https://bar.com and send me the the page it fetched.

Instead, I get a 500 error, and in the error log, I see:

[error] proxy: HTTPS: failed to enable ssl support for (bar.com)

Presumably I'm missing a directive here. Which might it be?

Never mind the security implications. I fully understand the risks.

  • Which version of Apache are you using? – Sam Halicke Nov 15 '09 at 1:40
  • "Never mind the security implications. I fully understand the risks." - This is the devops equivalent of "Hold My Beer" ; ) – Eric Kigathi Nov 13 at 23:52
up vote 66 down vote accepted

You'll need mod_ssl, mod_proxy and optionally mod_rewrite. Depending on your distribution and Apache version you may have to check if mod_proxy_connect and mod_proxy_http are loaded as well.

The directives for enabling SSL proxy support are in mod_ssl:

    ServerName foo.com
    SSLProxyEngine On
    SSLProxyCheckPeerCN on
    SSLProxyCheckPeerExpire on
    ProxyPass / https://secure.bar.com
    ProxyPassReverse / https://secure.bar.com

IIRC you can also use:

    RewriteRule / https://secure.bar.com [P]    # don't forget to setup SSLProxy* as well
  • 6
    Thanx, the missing entry was "SSLProxyEngine" for me... +1 – hurikhan77 Jan 24 '11 at 14:25
  • 2
    SSLProxyCheckExpire should be SSLProxyCheckPeerExpire – CodeReaper Sep 18 '12 at 9:30
  • Directive fixed. – Sam Halicke Sep 22 '12 at 4:26
  • But I got this error: Invalid command 'SSLProxyEngine', perhaps misspelled or defined by a module not included in the server configuration. Please help! – DerekY Dec 15 '14 at 3:01
  • Do you have mod_ssl installed? – Meetai.com Mar 13 '15 at 0:19

In Apache 1.x, mod_ssl would fix up ProxyPass. Do you have mod_ssl installed?

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.