From owner-freebsd-questions@FreeBSD.ORG Tue Oct 5 04:40:39 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 73CB11065670 for ; Tue, 5 Oct 2010 04:40:39 +0000 (UTC) (envelope-from peter@boosten.org) Received: from smtpq2.tb.mail.iss.as9143.net (smtpq2.tb.mail.iss.as9143.net [212.54.42.165]) by mx1.freebsd.org (Postfix) with ESMTP id 2DA508FC15 for ; Tue, 5 Oct 2010 04:40:38 +0000 (UTC) Received: from [212.54.42.137] (helo=smtp6.tb.mail.iss.as9143.net) by smtpq2.tb.mail.iss.as9143.net with esmtp (Exim 4.69) (envelope-from ) id 1P2zKP-0008OR-Of for freebsd-questions@freebsd.org; Tue, 05 Oct 2010 06:40:37 +0200 Received: from 54193b12.cm-5-2a.dynamic.ziggo.nl ([84.25.59.18] helo=ra.egypt.nl) by smtp6.tb.mail.iss.as9143.net with esmtp (Exim 4.69) (envelope-from ) id 1P2zKO-0006UO-E3 for freebsd-questions@freebsd.org; Tue, 05 Oct 2010 06:40:36 +0200 Received: from [127.0.0.1] (xp.egypt.nl [192.168.13.35]) by ra.egypt.nl (Postfix) with ESMTP id E26533983B for ; Tue, 5 Oct 2010 06:40:35 +0200 (CEST) Message-ID: <4CAAAC4A.5060106@boosten.org> Date: Tue, 05 Oct 2010 06:40:42 +0200 From: Peter Boosten User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.9) Gecko/20100915 Thunderbird/3.1.4 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <20101004221506.GA8662@polands.org> <20101005035354.GB8662@polands.org> In-Reply-To: <20101005035354.GB8662@polands.org> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-ZiggoSMTP-MailScanner-Information: Please contact the ISP for more information X-ZiggoSMTP-MailScanner-ID: 1P2zKO-0006UO-E3 X-ZiggoSMTP-MailScanner: Found to be clean X-ZiggoSMTP-MailScanner-SpamCheck: geen spam, SpamAssassin (niet cached, score=-2.1, vereist 5, BAYES_00 -2.60, CM_META_TB_NOARR 0.50, SPF_PASS -0.00) X-ZiggoSMTP-MailScanner-From: peter@boosten.org X-Spam-Status: No Subject: Re: OT: Apache as reverse SSL proxy X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Oct 2010 04:40:39 -0000 On 5-10-2010 5:53, Doug Poland wrote: > On Mon, Oct 04, 2010 at 09:19:52PM -0500, Adam Vande More wrote: > The documentation for www/pound > indicated "HTTPS does not allow virtual hosting". I seem to recall > bumping into this issue in the past that one cannot do named-based > vhosts on HTTPS. > > Look like it's back to the drawing board... > > You could circumvent that issue by terminating your HTTPS sessions on the reverse proxy itself (and talk HTTP to the application server). Some applications won't work that way, but modern ones (and even Outlook Web Access) can use a HTTPS-front-end. The problem exists within applications with hard-coded links. Peter -- http://www.boosten.org