logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> Apache View previous topic :: View next topic
Reply to topic   Topic: Requests not coming to web-server
Author
rahuil07



Joined: 12 Apr 2016
Posts: 2
Location: India

PostPosted: Tue 12 Apr '16 16:59    Post subject: Requests not coming to web-server Reply with quote

Hello All,

I'm currently on an e-commerce project where the flow is a bit like this:

Firewall --> Load balancer --> web-server --> App server

We have an issue where the request initiated by VISA/MC is not hitting the web-server (but is passing the load balancer).

My web-server uses property SSLVerifyClient ON (to validate the client certificate produced by VISA/MC), We have our server certificate and chain installed at Load balancer layer as well.

I think the client certificate produced by VISA/MC is getting validated at Load balancer layer and when traffic is hitting web-server it is getting failed as my web-server is still searching for a client certificate to validate.

Basically, i'm looking for an answer to below question:

1. Do we have to use SSLVerifyClient ON at web-server layer even when there is Load balancer which is validating client certificate?
Back to top
James Blond
Moderator


Joined: 19 Jan 2006
Posts: 7306
Location: Germany, Next to Hamburg

PostPosted: Mon 18 Apr '16 11:54    Post subject: Reply with quote

What kind of load balancer do you use?
Back to top
rahuil07



Joined: 12 Apr 2016
Posts: 2
Location: India

PostPosted: Mon 18 Apr '16 12:18    Post subject: Reply Reply with quote

Load balancer id F5 from BIG-IP
Back to top


Reply to topic   Topic: Requests not coming to web-server View previous topic :: View next topic
Post new topic   Forum Index -> Apache