Using Zorp GPL 3.3, have a reverse proxy for OWA, I added
def Zcommunicator():
Service("INcommunicator", INcommunicator,
chainer=SideStackChainer(CommunicatorHttpProxy),
router=DirectedRouter(SockAddrInet("<LAN IP>", 80)))
Listener(SockAddrInet("<public ip>", 55000), "INcommunicator")
class CommunicatorHttpProxy(HttpProxy):
def config(self):
HttpProxy.config(self)
self.request["GET"] = (HTTP_REQ_POLICY, self.filterURL)
self.request["POST"] = (HTTP_REQ_POLICY, self.filterURL)
def filterURL(self, method, url, version):
if ("http://<public DNS>:5500/cas" in url):
self.session.setServer(SockAddrInet("10.0.7.2", 5447))
elif ("http://<public DNS>:5500/director2" in url):
self.session.setServer(SockAddrInet("10.0.7.2", 5449))
elif ("http://<public DNS>:5500/techops" in url):
self.session.setServer(SockAddrInet("10.0.0.6", 80))
elif ("http://<public DNS>:5500/fubar" in url):
self.session.setServer(SockAddrInet("10.0.0.6", 80))
else: self.session.setServer(SockAddrInet("10.0.7.2", 80))
return HTTP_REQ_ACCEPT
class INcommunicator(PsslProxy):
def config(self):
PsslProxy.config(self)
self.client_verify_type = SSL_VERIFY_NONE
self.client_ca_directory = "/etc/ssl/certs"
self.server_need_ssl=FALSE
self.client_key_file = "/etc/ssl/private/xxx.key"
self.client_cert_file = "/etc/ssl/certs/xxx.crt"
#self.stack_proxy = CommunicatorHttpProxy
the "fubar" URL doesn't point to a real location--and I get the 500 error page back from the web server.
But when I try a (larger) real page, I'm seeing
Nov 28 15:42:39 localhost zorp/Zcommunicator[4334]: (svc/INcommunicator:9): Starting proxy instance; client_fd='15', client_address='AF_INET(<public ip>:2220)', client_zone='Zone(inter, 0.0.0.0/0)', client_local='AF_INET(<public ip>:5500)', client_protocol='TCP'
Nov 28 15:42:39 localhost zorp/Zcommunicator[4334]: (svc/INcommunicator:9/pssl): SSL handshake failed on the client side; error='error:1407609C:SSL routines:lib(20):SSL23_GET_CLIENT_HELLO:func(118):http request:reason(156)'
Ideas? Should I just reinstall 3.9.2 and copy my config files over? (no apt-get dist-upgrade option I see)
Thanks in advance