Linux

I got Exchange 2003 and an Apache 2 frontend server providing https support. It correctly works. My configuration for the reverse proxy is configured as follows:

<VirtualHost my.public.company.net:443>
ServerAdmin hostmaster@my.public.company.net
ServerName owa.company.net
DocumentRoot /usr/local/htdocs
RequestHeader set Front-End-Https "On"
ProxyRequests Off
ProxyPreserveHost On
SSLEngine On
SSLCertificateFile /etc/httpd/ssl/server.crt
SSLCertificateKeyFile /etc/httpd/ssl/server.key
<Location /exchange>
ProxyPass http://exchangeSrv/exchange
ProxyPassReverse http://exchangeSrv/exchange
SSLRequireSSL
</Location>
<Location /exchweb>
ProxyPass http://exchangeSrv/exchweb
ProxyPassReverse http://exchangeSrv/exchweb
SSLRequireSSL
</Location>
<Location /public>
ProxyPass http://exchangeSrv/public
ProxyPassReverse http://exchangeSrv/public
SSLRequireSSL
</Location>
</VirtualHost>

Plus in the exchangeSrv hosts file I added the ip address of the public server (owa.company.net) defined as the local ip of the reverse proxy (10.10.1.15):

10.10.1.15 owa.company.net

i use it with apache 2.0.52 (win based) and exchange 2000. in some weeks the apatche switch over to an unix server.

this lines i have added to http.conf:

-------------
Listen 443

SSLRandomSeed startup builtin
SSLSessionCache none

ErrorLog logs/error.ssl.log
TransferLog logs/access.ssl.log

<VirtualHost xxx:443>
ServerAdmin xxx.xxx.de
ServerName xxx
DocumentRoot "xxx"
#ver?ndert http header einer Clienanfrage
RequestHeader set Front-End-Https On
#schaltet verwendung mod_proy an bzw. aus
ProxyRequests Off
#gibt den http header host weiter
ProxyPreserveHost On
SSLEngine On
SSLCertificateFile ssl.crt/zertifikat.crt
SSLCertificateKeyFile ssl.crt/zertifikat.key

<Location />
# einbindung ext. informationen in den lokalen server
ProxyPass http://xxxx/
#korrigiert in verbindung mit proxypass die adressangabe innerhalb einer umleitung
ProxyPassReverse http://xxx/
#SSLRequireSSL
</Location>
</VirtualHost>
---------

i don't give the 3 parts exchange, exchweb and public to single locations, because we use rsa and other things combination with owa.

you have to make shure, to load the following modules:

LoadModule ssl_module modules/mod_ssl.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_http_module modules/mod_proxy_http.so


thank a lot for your help Sebastian.

regards tom