Ssl – 2-way SSL with apache forward proxy

apache-2.2forwardingPROXYsslvirtualhost

I'm working to set up Apache as a forward proxy with a client that uses 2-way SSL. The basic flow is myApplication –via http–> Apache proxy –via 2 way SSL–> client. After setting everything up, when I try to start Apache, I'm getting a "incomplete client cert configured for SSL proxy (missing or encrypted private key?)" error. What I can't figure out is that the client cert I'm using in the SSLProxyMachineCertificateFile directive has both the unencrypted private key and the public cert already. Any suggestions on what I'm missing and/or anything else I can try? Does the all-in-one machine cert need to have the chain in it as well?

Here's what my vhost looks like.

<VirtualHost *:8082>
    ServerName my.domain.com

    ProxyRequests On
    SSLProxyEngine On

    SSLProxyMachineCertificateFile /etc/httpd/keys/machine.pem
    SSLProxyCACertificateFile /etc/httpd/keys/machine.chain.crt

    ProxyPass / https://target.client.com/
    ProxyPassReverse / https://target.client.com/

    <Proxy *>
            Order deny,allow
            Allow from all
    </Proxy>
</VirtualHost>

EDIT: I updated the basic flow to clarify what kind of connection I'm trying to use between the application, apache, and the client.

Related Topic