Scenario:
I have an Apache Server(SSL enabled) and tomcat running on my machine
and there is one application (app1) hosted on tomcat which is only
accessible from Apache Server. You cannot access it directly from
tomcat.
Now
you want to access app1 using multiple domains i.e.
domain1.waheedtechblog.com annd domain2.waheedtechblog.com should
point to the same application which is hosted on tomcat.
(I
want to implement different Authentication mechanism based on
different domains)
Solution:
The above case can be achieved using NameBased VirtualHosts and SSL.
First
you need to uncomment following lines form ${apache}/conf/httpd.conf
file
LoadModule
ssl_module modules/mod_ssl.so
LoadModule
proxy_module modules/mod_proxy.so
LoadModule
proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule
rewrite_module modules/mod_rewrite.so
- LoadModule proxy_http_module modules/mod_proxy_http.so
Include
conf/extra/httpd-ssl.conf
then
goto ${apache}/conf/extra/httpd-ssl.conf file add Virtualhost tag for
each domain.
Listen
443
NameVirtualHost
*:443
<VirtualHost
*:443>
DocumentRoot
"c:/Apache2/htdocs"
ServerName
domain1.waheedtechblog.com
ServerAdmin
admin@example.com
ErrorLog
"c:/Apache2/logs/error_domain1.log"
TransferLog
"c:/Apache2/logs/access_domain1.log"
SSLEngine
on
SSLCertificateFile
"C:\Apache2\certificate\domain1.crt"
SSLCertificateKeyFile
"C:\Apache2\certificate\domain1.key"
ProxyPass
/ ajp://sp.domain.com:8009/app1/
BrowserMatch
"MSIE [2-5]" \
nokeepalive
ssl-unclean-shutdown \
downgrade-1.0
force-response-1.0
</VirtualHost>
<VirtualHost
*:443>
DocumentRoot
"c:/Apache2/htdocs"
ServerName
domain2.waheedtechblog.com
ServerAdmin
admin@example.com
ErrorLog
"c:/Apache2/logs/error_domain2.log"
TransferLog
"c:/Apache2/logs/access_domain2.log"
SSLEngine
on
SSLCertificateFile
"C:\Apache2\certificate\domain2.crt"
SSLCertificateKeyFile
"C:\Apache2\certificate\domain2.key"
ProxyPass
/ ajp://sp.domain.com:8009/app1/
BrowserMatch
"MSIE [2-5]" \
nokeepalive
ssl-unclean-shutdown \
downgrade-1.0
force-response-1.0
</VirtualHost>
Points
to remember:
Add
all DNS entry in system hosts file Eg: for windows (Add “127.0.0.1
domain1.waheedtechblog.com” to
“C:\Windows\System32\drivers\etc\hosts”)
Make
sure you are using different certificates and Key for each domain or
else it will always point to default VirtualHost i.e. first one that
you have defined. Click here
on how to generate key and certificate.
In
proxyPass, always ends with '/' or else you will see redirect issue.
In
case of any issue, You can drop your comment in the comment box.
Reference:
https://wiki.apache.org/httpd/NameBasedSSLVHosts
