Proxy iDempiere10 through Apache

[Syed]

Dear Community,

I have setup apache proxy configuration for idempiere 10

I just get a blank webui login page while proxy through apache. without proxy, I am able to see the webui login page. Attached the responses for your reference.

but the same proxy configuration works perfectly well with idempiere5.1.

any idea to resolve this issue?

Thanks in advance,

Regards,

Syed.

[Syed]

FYI:

idempiere Monitor and plugin consoles are working perfectly fine through apache proxy except webui login page.

[Carlos Antonio Ruiz Gomez]

The line that solves that in nginx:

proxy_set_header  X-Forwarded-Proto $scheme;

That's what allow to use 8080 as proxy in nginx.

I don't know the syntax for that in apache, googling is probably something like this:

https://webmasters.stackexchange.com/a/107445

But I don't know and don't have a way to test.

Regards,

Carlos Ruiz

En 09/02/23 04:08, muri...@devcoffee.com.br escribió:

Hi Syed,

I'm using nginx for production servers: https://wiki.idempiere.org/en/Proxy_iDempiere_Through_Nginx

but i tested v10 in an old apache proxy instance with the following options and it worked :

        SSLProxyEngine on
        SSLProxyVerify none

        SSLProxyCheckPeerCN off
        SSLProxyCheckPeerName off
        SSLProxyCheckPeerExpire off

        ProxyPreserveHost On

        ProxyPass / https://127.0.0.1:8443/
        ProxyPassReverse / https://127.0.0.1:8443/
        ProxyPassReverseCookiePath /webui /webui

hope it helps

--

[Syed]

Dear Carlos,

Thank you for the kind reply.

I will check and update you about the fix.

Thank you,

Syed.

[Michal Zilincar]

this conf is working for me with iDempiere 9  and Apache

<VirtualHost *:443>
    RequestHeader set X_FORWARDED_PROTO 'https' env=HTTPS
    ServerName xxx.yyy.sk

    DocumentRoot /var/www/html
    ErrorLog ${APACHE_LOG_DIR}/error.log
    CustomLog ${APACHE_LOG_DIR}/access.log combined
    SSLCertificateFile /etc/letsencrypt/live/yyy.xxx.sk/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/yyy.xxx.sk/privkey.pem
    Include /etc/letsencrypt/options-ssl-apache.conf
    SSLCertificateChainFile /etc/letsencrypt/live/yyy.xxx.sk/chain.pem

    RewriteEngine On

    # websocket
        RewriteCond %{HTTP:Upgrade}         =websocket                      [NC]
    RewriteRule ^/webui/serverpush/(.*)           ws://localhost:8080/webui/serverpush/$1   [P,L]

    ProxyRequests Off
    <Proxy *>
        Order deny,allow
        Allow from all
    </Proxy>

    RequestHeader set "X-Forwarded-Proto" expr=%{REQUEST_SCHEME}
    RequestHeader set "X-Forwarded-SSL" expr=%{HTTPS}

    ProxyPass /server-status http://localhost/server-status
    ProxyPass /webui http://localhost:8080/webui retry=1 acquire=3000 timeout=600 Keepalive=On
    ProxyPass / http://localhost:8080/webui retry=1 acquire=3000 timeout=600 Keepalive=On
    ProxyPreserveHost On

</VirtualHost>

[Syed]

Dear Michal,

Your configuration is excellent. I am able to log in without any issues.

Thank you for your kind help.

Regards,

Syed.

,