...
Voici maintenant un exemple de configuration apache qui va rediriger les requetes http vers https puis faire proxy vers l'application esup-signature
| Bloc de code | ||||
|---|---|---|---|---|
| ||||
<VirtualHost *:80>
ServerName esup-signature.univ-ville.fr
ServerAlias esup-signature
ServerAdmin system@univ-ville.fr
ServerSignature Off
RewriteEngine On
RewriteRule ^(.*) https://esup-signature-demo.univ-rouen.fr$1 [L,R]
</VirtualHost>
<VirtualHost *:443>
ServerName esup-signature.univ-rouen.fr
ServerAlias esup-signature
ServerAdmin systeme@univ-rouen.fr
ServerSignature Off
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/crt
SSLCertificateKeyFile /etc/pki/tls/private/key
SSLCertificateChainFile /etc/pki/tls/certs/cacert
SSLverifyclient none
ProxyPreserveHost On
#ProxyPass / ajp://localhost:6009/ ttl=10 timeout=3600 loadfactor=100 retry=1
# ou
ProxyPass / http://localhost:8080/ ttl=10 timeout=3600 loadfactor=100 retry=1
# avec proxy http (et non ajp), il faut ajouter le X Forward
RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
RequestHeader set "X-Forwarded-SSL" expr=%{HTTPS}
ProxyPreserveHost On
</VirtualHost> |
...