1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

ProxyRequests Off

<Proxy balancer://myservername.com>
    BalancerMember http://localhost:18140 keepalive=on max=2 retry=30
</Proxy>

<VirtualHost *:8140>
    SSLEngine on
    SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA
    SSLCertificateFile /etc/opt/csw/puppet/ssl/certs/myservername.com.pem
    SSLCertificateKeyFile /etc/opt/csw/puppet/ssl/private_keys/myservername.com.pem
    SSLCertificateChainFile /etc/opt/csw/puppet/ssl/ca/ca_crt.pem
    SSLCACertificateFile /etc/opt/csw/puppet/ssl/ca/ca_crt.pem
    SSLCARevocationFile /etc/opt/csw/puppet/ssl/ca/ca_crl.pem
    SSLVerifyClient optional
    SSLVerifyDepth  1
    SSLOptions +StdEnvVars

    RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
    RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

    <Location />
       SetHandler balancer-manager
       Order allow,deny
       Allow from all
    </Location>

    ProxyPass / balancer://myservername.com:8140/
    ProxyPassReverse / balancer://myservername.com:8140/
    ProxyPreserveHost on

</VirtualHost>