/ Zope / Apsis / Pound Mailing List / Archive / 2006 / 2006-09 / Redirect rewrites fail

[ << ] [ >> ]

[ Does anyone have Oulook Web Access proxying ... ] [ Pound and back-end with HTTPS / "titetluc ... ]

Redirect rewrites fail
Rob Moore <rmoore(at)espsg.com>
2006-09-07 21:34:39 [ SNIP ]
I'm using pound 2.1 along the lines of section 3.3 in the FAQ (Virtual 
Hosts: What happens when my server replies with a redirect?) in that I'm 
using pound as a HTTPS wrapper around a HTTP service. I've not been able 
to get pound to perform as I understand it should in the aforementioned 
FAQ entry. After hours of experimentation and searching, I've was hoping 
somebody might be able to steer me in the right direction.

I've verified that the server responds with a 302 and that the IP 
address that ListenHTTPS is pointing to correctly resolves to the 
address the backend server is directing the browser to (using nslookup). 
Also, the client is passing the host header in the request.

Although it's the default, I've tried explicitly setting RewriteLocation 
to 1 in the pound.cfg without any success. The only thing that occurs to 
me is that the cert is for a server with a different common name (I'm in 
the process of changing out the server to a new machine which currently 
has another name) but I rather doubt pound cares is aware of the 
incorrect cert value.

The only other case I could find in the mail list archives similar to 
this ended up being a bug in pound sometime back (a 1.x instance I believe).

Rob

Attachments:  
rmoore.vcf text/x-vcard 338 Bytes
smime.p7s application/x-pkcs7-signature 4838 Bytes

Re: [Pound Mailing List] Redirect rewrites fail
Rob Moore <rmoore(at)espsg.com>
2006-09-07 22:41:26 [ SNIP ]
I should have also mentioned that pound and the backend server are one 
in the same. That is, the services run on the same server under 
different ports.

Rob

Attachments:  
rmoore.vcf text/x-vcard 338 Bytes
smime.p7s application/x-pkcs7-signature 4838 Bytes

Re: [Pound Mailing List] Redirect rewrites fail
Rob Moore <rmoore(at)espsg.com>
2006-09-11 19:03:57 [ SNIP ]
I've reverted back to the 1.x version of pound which I'm able to get 
working as desired (using RewriteRedirect 2). However, I'd like to use 
pound 2.x in the future so I'd like to understand what I'm doing wrong 
(I take it from the deafening sound of crickets that nobody else has run 
into this issue).  It seems like a common usage of pound and my 
configuration is pretty simple:

ListenHTTPS
    Address 0.0.0.0
    Port        443
    Cert        "/etc/pound/cert.pem"

    Service
       BackEnd
         Address 127.0.0.1
         Port        8080
       End
    End
End

BTW, I've tried it with the Address 0.0.0.0 set to the machine's IP 
without any discernible difference.

Thanks,

Rob

Attachments:  
rmoore.vcf text/x-vcard 338 Bytes

MailBoxer