Security

Ask something
Discussion Locked

Reverse proxy and client certificates

0 helpful
1 reply

by pequeberto

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi all!

We are using an application, which is configured to be accessed using https with an Apache reverse proxy.

As far as I know, in an https with a reverse proxy connection, two
https connections are established, if the proxy is configured for bridging:
- https connection between client (browser) and proxy
- https connection between proxy and Web server/EP.

This is not a problem when not using client certificates, but, what
would happen when using them? Our application have to check the
client certificate with the CA, but.. will be able to get the client
certificate from the application (from the Web Server) using a
reverse proxy, I mean, will the client certificate arrive the Web
Server?

Has anyone worked with this scenario before? Many thanks in advance

Bert

1 reply

by luyasu

You would be better off with CA client/server certicates on a SRP. You could change conf. to Cisco CSS/SCA, much cleaner.

Nevertheless with SRP you'll run into issues where URIs differ internally and no clear implementation standard for the developers.

Your company will need to configure the clients' certificates for web browsing your servers.

Why? Client with private key-pair, server accesses public, but must know the private pair.

I hope I'm helpful!

TSP

This discussion is closed to new replies.