Welcome! Log In Create A New Profile


Proxy_Pass to another vhost on same machine

June 09, 2014 01:53PM
I am attempting to use ca.mydomain.com with client certificate auth as a springboard for other sites on the same server. I am using client certs with my iphone (and other browsers) to skip the password auth and be more secure. The first two proxy_pass statements work fine (sickbeard and couchpotato) but the next (munin) gives the error 400 Bad Request No required SSL certificate was sent. If I put the address (https://tools.mydomain.com/munin) in my address bar it works fine? I don't understand why it is requesting the client cert for the subdomain that doesn't use client auth. The tools.mydomain.com uses basic auth.

Secondly I want to access the tools.mydomain.com from ca.mydomain.com and not be prompted for the basic auth password. So I want to include the authorization in the proxying.

Any help you all can provide would be great. I hope I explained my issue well enough!

server {
listen my.ip.address:80;
server_name ca.mydomain.com;
rewrite ^ https://$server_name$request_uri? permanent;

server {
listen my.ip.address:443 ssl spdy;
ssl_certificate /etc/ssl/certs/my.pem;
ssl_certificate_key /etc/ssl/private/my.key;
root /var/www/ca.thefamilygarrison;
index index.php index.html index.htm;
server_name ca.mydomain.com;
pagespeed off;

ssl_client_certificate /etc/nginx/clientauth/ca.crt;
ssl_verify_client on;

location ~ \.php$ {
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;

location /sickbeard {
proxy_pass http://my.ip.address:65007/sickbeard;

location /couchpotato {
proxy_pass http://my.ip.address:65005/couchpotato;

location /munin {
proxy_pass https://tools.mydomain.com/munin;
Subject Author Posted

Proxy_Pass to another vhost on same machine

paulg1981 June 09, 2014 01:53PM

Re: Proxy_Pass to another vhost on same machine

Maxim Dounin June 10, 2014 08:04AM

Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 70
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready