mardi 6 novembre 2018

Apache behind corporate proxy with authentication

I need to deploy Web-app (which uses reCaptca from google) with Apache on CentOS server which has no internet connection - only via proxy.

To access any site from cmd I do next

export https_proxy=https://${user}:${password}@10.144.200.11:80
curl -k https://www.google.com

or with base64 creds in curl

export https_proxy=https://10.144.200.11:80
curl -k -H"Proxy-Authorization: Basic ${base64_creds}" https://www.google.com

So to make Web-app work I've tried (spoiler: nothing worked for me)

  1. Adding export https_proxy=... system-wide in /etc/environment and reboot
  2. Adding SetEnv https_proxy ... in /etc/sysconfig/httpd and reloading systemd and service itself
  3. Working with ProxyRemote

I've turned on mod_proxy, mod_proxy_http and mod_proxy_connect and tried lots of variations of config inside VirtualHost:

<Proxy *>
    Order deny,allow
    Allow from all
</Proxy>

ProxyRequests on
RequestHeader set Proxy-Authorization "*base64_creds*"
RequestHeader add Authorization "*base64_creds*"

ProxyRemote * https://10.144.200.11:80
# + tried all below and much more
# ProxyRemote https://www.google.com/ https://*base64_creds*@10.144.200.11:80
# ProxyRemoteMatch google\.com https://10.144.200.11:80
# ProxyRemote google\.com https://10.144.200.11:80
# ProxyRemote google.com https://10.144.200.11:80

I've turned logs to debug but I don't see any mentions of proxy server... What am I doing wrong? Is there a way to make this work?




Aucun commentaire:

Enregistrer un commentaire