Forum

reverse-proxy how to bind SSLcertFile question

Fred
15 July 2015, 12:27
Hi hugo,

I am a Free#BSD user and I will be hosting individual domain inside a jail.
I need to setup a reverse-proxy to routes the requests based on the domain-names to the internal IPs of the jail.
So far, I have been told to set the following in my hiawatha.conf
VirtualHost {
Hostname = www.mydomain1.com
...
ReverseProxy .* http[s]://<ip_jail1>/
}

VirtualHost {
Hostname = www.mydomain2.com, www.some_other_domain.com, www.my_shiny_new_domain.com
...
ReverseProxy .* http[s]://<ip_jail2>/
}

...

I fully understand the above but how do I setup the binding option?

At the moment I use the following:
Binding {
Port = 80
Interface = MyIPv4
MaxKeepAlive = 100
TimeForRequest = 5,15
MaxRequestSize = 2000
MaxUploadSize = 2
}

Binding {
Port = 443
Interface = MyIPv4
MaxKeepAlive = 100
TimeForRequest = 5,15
SSLcertFile = /etc/ssl/localcerts/blog_example_tld.pem
MaxRequestSize = 2000
MaxUploadSize = 2
}

Now the bit I don't undertsand is as each domain will have their own ssl certificate, how do I set it all up?
Do I add each SSLcertFile for all domain inside the proxy binding option?
Hugo Leisink
17 July 2015, 16:13
Give each virtual host that has its own certificate it's own VirtualHost block and add the TLScertFile (or SSLcertFile for older Hiawatha versions) option there as well.
This topic has been closed.