SSL certificate proxy redirect to port mongrel rails app help

apache-2.2mod-proxymongrelssl-certificate

I am trying to install a goddaddy ssl certificate on my dedicated plesk web server machine for a rails app that is working fine with non-https using mongrel cluster and apache mod_proxy to redirect the requests to the rails app. I have installed many certs for regular php based websites countless times and the certificate is installed properly but I cannot seem to get mod_proxy to forward on the requests no matter what I've tried. I have tried all combinations of the following and the errors I get in the logs:

`
Order deny,allow
Allow from all

SSLProtocol all
SSLCertificateFile /etc/httpd/ssl/mydomain.com.crt
SSLCertificateKeyFile /etc/httpd/ssl/mydomain.com.key
SSLCertificateChainFile /etc/httpd/ssl/gd_intermediate_bundle.crt
SSLProxyEngine on
ProxyPass / https://www.mydomain.com:3003/
ProxyPreserveHost on
`

I keep getting errors in the logs similar to:
[error] (502)Unknown error 502: proxy: pass request body failed to 64.71.183.241:3003 (www.mydomain.com)
[error] proxy: pass request body failed to 64.71.183.241:3003 (www.mydomain.com) from 204.16.153.250 ()

and

[error] [client 64.71.183.241] SSL Proxy requested for mydomain.com:443 but not enabled [Hint: SSLProxyEngine]
[error] proxy: HTTPS: failed to enable ssl support for 64.71.183.241:3003 (www.mydomain.com)

Any help would be appreciated, google is not helping me figure this out and I've tried about every combination possible.

Best Answer

I have a similar configuration that works:

  # SSL
  SSLEngine On
  SSLCipherSuite HIGH:MEDIUM
  SSLCertificateFile    /etc/apache2/ssl/mydomain.com.crt
  SSLCertificateKeyFile /etc/apache2/ssl/mydomain.com.key

  ProxyPass / http://www.mydomain.com:3003/
  ProxyPassReverse / http://www.mydomain.com:3003/
  ProxyPreserveHost on

Hope it helps (although I can't explain every parameter). Perhaps you might want to use http instead of https for the ProxyPass, because it's just a redirect to localhost and mongrel doesn't support (?) or doesn't come with activated SSL support IMHO.

Related Topic