Mutiple SSL sessions when proxying from SSL server to origin server

Mutiple SSL sessions when proxying from SSL server to origin server

Post by Stanley.Hopcr.. » Thu, 24 Aug 2000 04:00:00



Dear Ladies and Gentlemen,

I am writing to say that it seems to me that when my SSL server proxies
requests to an origin server, that each part of the requested page is
fetched by a new SSL session (eg there are lots of [info] level
messages in the SSL servers log about Seeding, Connection, and Initial
HTTPS request. There are no Subsequent messages).

In other words, that the SSL client is forced to handshake for each
part of the page, or that there is no session caching.

Is this  correct ?

Is it caused by the TCP connection not being kept alive between the
SSL server and the origin server (because HTTP 1.0 does not support TCP
session keepalives) ?

Is there are any way to overcome it ?

Thank you,

Yours sincerely.

S Hopcroft

Sent via Deja.com http://www.deja.com/
Before you buy.

 
 
 

1. SSL Proxy from Apache server to another HTTP server..

Here's the configuration I have to work with:

----------------   http  --------------   https  --------------------
|  HTTP client |  ---->  | Apache     |  ------> | some HTTP server |
----------------         --------------          --------------------

Now, I have to have a *client* certificate on the Apache server and I have
to use mod_proxy to set up the ProxyPass and ProxyPassReverse messages.

My problem is that, while I've used copy of the server certificate from
the "some HTTP server" and it's key file along with the
SSLProxyMachineCertificateFile directive, I don't know what the approach
would be in order to make sure that a *client* certificate is used for the
same Proxy connection.  Would it be the same directive?

Any insights would be most appreciated...

TIA

2. Gnome App compilation problem

3. Serving pages from non-SSL server through Netscape SSL

4. pb with asus pvi-486SP3 motherboard

5. SSL support for non-SSL web server

6. Solaris x86 asppp and IBM Global Network ISP

7. Question: Running Apache SSL and Apache non-SSL on one server

8. Linux by MicroSoft?

9. SSL proxy for clients uncapable of SSL

10. SSL -> [Apache] -> proxy gateway -> No-SSL

11. Which Web server supports SSL proxy on linux

12. Does Apache-SSL Proxy Server do a "ProxyPass" for WebServers running https ??

13. can i use java and ssl through proxy server?