[undertow-dev] Proxing with SSL Termination

[Stuart Douglas]

Sure, you just add an SSL listener to the Undertow instance.

If you want to forward SSL information as a header you can do
something like this:


proxyHandler.addRequestHeader(Headers.SSL_CLIENT_CERT,
"%{SSL_CLIENT_CERT}", DefaultServer.class.getClassLoader());
proxyHandler.addRequestHeader(Headers.SSL_CIPHER, "%{SSL_CIPHER}",
DefaultServer.class.getClassLoader());
proxyHandler.addRequestHeader(Headers.SSL_SESSION_ID,
"%{SSL_SESSION_ID}", DefaultServer.class.getClassLoader());

Which will make the SSL information available on the backend as a header.

Stuart

On Sun, Apr 23, 2017 at 9:51 PM, Zamir, Alon <alon.zamir at hpe.com> wrote:
> Is there an SSL Termination support to be used in conjunction with reverse
> proxy server ?
>
> I’d like to implement an SSL server which terminates the SSL request and
> proxies plain HTTP to a remote server.
>
>
>
>
> _______________________________________________
> undertow-dev mailing list
> undertow-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/undertow-dev