Univention Bugzilla – Bug 43832
Enable SSLProxyCheckPeerName and SSLProxyCheckPeerCN
Last modified: 2020-07-03 20:51:53 CEST
Since Bug #43813, the Apache configuration contains: SSLProxyCheckPeerCN off SSLProxyCheckPeerName off (In reply to Florian Best from comment #4) > (In reply to Stefan Gohmann from comment #2) > > The following options need to be set in > > /etc/apache2/sites-enabled/default-ssl.conf: > > > > SSLProxyCheckPeerCN off > > SSLProxyCheckPeerName off > It's a global configuration which affects all customers/third-party-apps > apache configurations. In the recent version of apache httpd (in trunk/) > these options can also be set in the proxy-section but not in our version. > Maybe we can switch this somewhen. +++ This bug was initially created as a clone of Bug #43813 +++ The HTTPS access to docker based sites doesn't work. After installing dudle, I get the following browser message: ----------------------------------------------------------------------- Proxy Error The proxy server could not handle the request GET /dudle/. Reason: Error during SSL Handshake with remote server ----------------------------------------------------------------------- The apache log: ----------------------------------------------------------------------- [Sat Mar 11 01:09:29.517204 2017] [proxy:error] [pid 11567] (502)Unknown error 502: [client 10.205.1.178:33742] AH01084: pass request body failed to 127.0.0.1:40001 (127.0.0.1) [Sat Mar 11 01:09:29.517742 2017] [proxy:error] [pid 11567] [client 10.205.1.178:33742] AH00898: Error during SSL Handshake with remote server returned by /dudle/ [Sat Mar 11 01:09:29.517941 2017] [proxy_http:error] [pid 11567] [client 10.205.1.178:33742] AH01097: pass request body failed to 127.0.0.1:40001 (127.0.0.1) from 10.205.1.178 () -----------------------------------------------------------------------
This issue has been filed against UCS 4.2. UCS 4.2 is out of maintenance and many UCS components have changed in later releases. Thus, this issue is now being closed. If this issue still occurs in newer UCS versions, please use "Clone this bug" or reopen it and update the UCS version. In this case please provide detailed information on how this issue is affecting you.