Results 1 to 2 of 2

Thread: ZCS 7.2 Through Apache Reverse Proxy Over HTTPS Issues

Hybrid View

  1. #1
    Join Date
    Jun 2012
    Posts
    5
    Rep Power
    3

    Default ZCS 7.2 Through Apache Reverse Proxy Over HTTPS Issues

    I'm having a very big yet very little issue and was wondering if there was anyone out there that could shed some light on this problem I'm having. We have ZCS 7.2 running in our production environment on Ubuntu 10.04, but as a beta. Basically, if anyone wants to test it out they can, and their input will help when we finally turn off the lights on our old Exchange 2003 box. Right now everything is working fine, except for reverse proxying to zimbramail.example.com through another Ubuntu 10.04 Box just running Apache, zimbraproxy.example.com. The zimbraproxy.example.com box will be placed in the DMZ once I get these kinks worked out. Browsing to zimbraproxy with Firefox works flawlessly. IE 8 or 9, after getting past the VMware login page, it hangs loading the Ajax interface, and then finally musters up enough energy to get past it. Google Chrome doesn't like the reverse proxy at all, and basically comes to a standstill once loading the Ajax interface. The standard HTML pages work fine for both IE and Chrome. But that is not an option, as my boss absolutely loves the Ajax view. The Main Zimbra server is using Jetty.

    I do not just want to abandon my Ubuntu 10.04 Apache Reverse Proxy because I know it is so close to working. Worked through the HTTPS issues and the BAD_JSON_RESPONSE errors with modifications to my proxy config seen here.

    Here is my Apache Virtual Host File on zimbraproxy.example.com

    <VirtualHost *:443>
    #SecFilterEngine Off (This didn't seem to like my apache)
    SetEnv force-proxy-request-1.0 1
    SetEnv proxy-nokeepalive 1

    ServerName zimbraproxy.example.com
    SSLEngine on
    SSLProtocol all
    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSL v2:+EXP:+eNULL
    SSLCertificateFile /etc/apache2/ssl/server.crt
    SSLCertificateKeyFile /etc/apache2/ssl/server.key

    SSLProxyEngine on
    SSLProxyCACertificateFile /etc/apache2/ssl/server.crt

    #RequestHeader set Front-End-Https On (This also did not like my apache)
    ProxyRequests On
    ProxyPreserveHost On
    ProxyVia full

    <Proxy *>
    Order deny,allow
    Allow from all
    </Proxy>

    ProxyPass / https://zimbramail.example.com/
    ProxyPassReverse / https://zimbramail.example.com/

    ErrorLog /var/log/apache2/error.log

    </VirtualHost>

    Also in the httpd.conf file itself I have this defined:

    <VirtualHost *:80>
    RewriteEngine on
    ReWriteCond %{SERVER_PORT} !^443$
    RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [NC,R,L]
    </VirtualHost>

    In order for end users to not have to remember "https" infront of the subdomain zimbramail.example.com.

    The commands I ran to enable modules within apache are as follows:
    a2enmod proxy
    a2enmod ssl
    a2enmod rewrite
    a2enmod proxy_http

    Anyone that could shed some light on this would make my month!!!

  2. #2
    Join Date
    Sep 2008
    Posts
    134
    Rep Power
    7

    Default

    Hi Abeckhardt,

    i have the same issue after upgrading Zimbra 7.2, it worked before flawless from 5.0. My reverseproxy in front is running debian 6.0 without rewrite, just some directories.

    it complains mostly about not getting some ajax script file, but trying some times (sometimes 4-5times) it works any time.

    best regards
    thomas
    zmcontrol -v
    1x Release 6.0.10_GA_2692.UBUNTU8_64 NETWORK edition.
    1x Release 6.0.14_GA_2928.UBUNTU8_64 NETWORK edition
    2x Release 7.1.3_GA_3346.UBUNTU10_64 NETWORK edition, Patch 7.1.3_P1
    1x Release 8.0.2.GA.5569.UBUNTU12.64 NETWORK edition

    2x Release 6.0.10_GA_2692.UBUNTU8_64 FOSS edition
    2x Release 7.2.2_GA_2852.UBUNTU10_64 FOSS edition
    1x Release 7.1.4_GA_2555.UBUNTU10_64 FOSS
    1x Release 8.0.3.GA.5664.UBUNTU12.64 FOSS edition

Similar Threads

  1. reverse proxying ZCS 7.x (jetty) with apache
    By jdetert in forum Administrators
    Replies: 2
    Last Post: 12-09-2011, 09:00 AM
  2. Zimbra Webclient behind Apache Reverse Proxy
    By mircevski in forum Administrators
    Replies: 3
    Last Post: 06-01-2010, 02:21 AM
  3. Reverse Proxy
    By danielfarrelly in forum Administrators
    Replies: 7
    Last Post: 03-06-2008, 07:36 AM
  4. Zimbra https proxy with apache
    By haensse in forum Installation
    Replies: 20
    Last Post: 02-23-2008, 02:48 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •