i***@googlemail.com
2014-05-14 16:48:26 UTC
HELP!
I have an apache config with a virtual host used for a https site.
Its using mod_jk to direct traffic to a backend jboss service.
It also uses JkUnMount to avoid such redirection for a handful of paths
eg JkUnMount /images/* loadbalancer
All is working fine.
EXCEPT.... for /cgi-bin/*
JkUnMount /cgi-bin loadbalancer is still directing traffic to the "loadbalancer"
I have also tried
SetEnvIf Request_URI "/cgi-bin/*" no-jk
but to no avail.
Does anybody know if there is some "gotcha" about using mod_jk in a SSL apache virtual host maybe, becasue it is all i can think of.
The access log shows
192.168.52.208 - - [14/May/2014:17:23:47 +0100] "GET /cgi-bin/uname.sh HTTP/1.1" 404 35217
Full virtual host text below. This is running on solaris 10 on a V240 FWIW, apache 2.2.22
cheers
ian
===
<VirtualHost 192.168.52.60:18081>
ServerName loadbalancer_ssl
SetEnvIf Request_URI "/cgi-bin" no-jk
SetEnvIf Request_URI "/cgi-bin/" no-jk
SetEnvIf Request_URI "/cgi-bin/*" no-jk
ScriptAlias /cgi-bin/ "/proj/cgi-bin/"
<Directory "/proj/cgi-bin/">
PassEnv LD_LIBRARY_PATH
Options FollowSymLinks Includes ExecCGI
AllowOverride All
Options None
Order allow,deny
Allow from all
</Directory>
JkUnMount /cgi-bin loadbalancer
JkUnMount /cgi-bin/* loadbalancer
JkUnMount /images loadbalancer
JkUnMount /images/* loadbalancer
JkUnMount /contents loadbalancer
JkUnMount /contents/* loadbalancer
JkUnMount /js loadbalancer
JkUnMount /js/* loadbalancer
JkUnMount /css loadbalancer
JkUnMount /css/* loadbalancer
JkUnMount /CMS loadbalancer
JkUnMount /CMS/* loadbalancer
JkUnMount /oneClickEdit loadbalancer
JkUnMount /oneClickEdit/* loadbalancer
JkMount /* loadbalancer
JkMount /*/ loadbalancer
ErrorLog "logs/j2ee/errors"
CustomLog "logs/j2ee/access" common
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5
SSLCertificateFile "/opt/apache/conf/bvtest.crt"
SSLCertificateKeyFile "/opt/apache/conf/bvtest.key"
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/opt/apache/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-5]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog "logs/ssl_request_log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
I have an apache config with a virtual host used for a https site.
Its using mod_jk to direct traffic to a backend jboss service.
It also uses JkUnMount to avoid such redirection for a handful of paths
eg JkUnMount /images/* loadbalancer
All is working fine.
EXCEPT.... for /cgi-bin/*
JkUnMount /cgi-bin loadbalancer is still directing traffic to the "loadbalancer"
I have also tried
SetEnvIf Request_URI "/cgi-bin/*" no-jk
but to no avail.
Does anybody know if there is some "gotcha" about using mod_jk in a SSL apache virtual host maybe, becasue it is all i can think of.
The access log shows
192.168.52.208 - - [14/May/2014:17:23:47 +0100] "GET /cgi-bin/uname.sh HTTP/1.1" 404 35217
Full virtual host text below. This is running on solaris 10 on a V240 FWIW, apache 2.2.22
cheers
ian
===
<VirtualHost 192.168.52.60:18081>
ServerName loadbalancer_ssl
SetEnvIf Request_URI "/cgi-bin" no-jk
SetEnvIf Request_URI "/cgi-bin/" no-jk
SetEnvIf Request_URI "/cgi-bin/*" no-jk
ScriptAlias /cgi-bin/ "/proj/cgi-bin/"
<Directory "/proj/cgi-bin/">
PassEnv LD_LIBRARY_PATH
Options FollowSymLinks Includes ExecCGI
AllowOverride All
Options None
Order allow,deny
Allow from all
</Directory>
JkUnMount /cgi-bin loadbalancer
JkUnMount /cgi-bin/* loadbalancer
JkUnMount /images loadbalancer
JkUnMount /images/* loadbalancer
JkUnMount /contents loadbalancer
JkUnMount /contents/* loadbalancer
JkUnMount /js loadbalancer
JkUnMount /js/* loadbalancer
JkUnMount /css loadbalancer
JkUnMount /css/* loadbalancer
JkUnMount /CMS loadbalancer
JkUnMount /CMS/* loadbalancer
JkUnMount /oneClickEdit loadbalancer
JkUnMount /oneClickEdit/* loadbalancer
JkMount /* loadbalancer
JkMount /*/ loadbalancer
ErrorLog "logs/j2ee/errors"
CustomLog "logs/j2ee/access" common
SSLEngine on
SSLProtocol all -SSLv2
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5
SSLCertificateFile "/opt/apache/conf/bvtest.crt"
SSLCertificateKeyFile "/opt/apache/conf/bvtest.key"
<FilesMatch "\.(cgi|shtml|phtml|php)$">
SSLOptions +StdEnvVars
</FilesMatch>
<Directory "/opt/apache/cgi-bin">
SSLOptions +StdEnvVars
</Directory>
BrowserMatch "MSIE [2-5]" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0
CustomLog "logs/ssl_request_log" \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>