<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Hi Amedeo,<div><br></div><div>just one question, is there a security requirement to keep your internal proxy to geoserver under a SSL channel? In that case I would recommend to follow this directive [1] and those below</div><div><br></div><div>Ciao</div><div>Francesco</div><div><br></div><div>[1] <a href="http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslproxycacertificatefile">http://httpd.apache.org/docs/2.2/mod/mod_ssl.html#sslproxycacertificatefile</a></div><div> <br><div><div>Il giorno 06/lug/2016, alle ore 15:08, Amedeo Fadini <<a href="mailto:amefad@gmail.com">amefad@gmail.com</a>> ha scritto:</div><br class="Apple-interchange-newline"><blockquote type="cite">Hi everybody,<br><br>so my installation of geonode with ssl works fine (2.4 on Ubuntu<br>server via apt-get) but I still haven't found the time to update the<br>ssl guide because we're unable to view geonode from outside...<br><br>we ave a web gateway with apache 2.2 that forwards the request from<br>outside using proxy directive<br><br><a href="http://gis.mydomain.com">gis.mydomain.com</a> >> mygeonode<br><br>I had to set the SITEURL to the external name <a href="http://gis.mydomain.com">gis.mydomain.com</a> as the<br>ssl certificate is issued for that domain, I also used<br><a href="https://gis.mydomain.com">https://gis.mydomain.com</a> as LOCATION in geoserver section of<br>local_settings.py (otherwise the command geonode updatelayers doesn't<br>work due to authorization failure)<br><br>Browsing the maps with geoexplorer the WMS requests are correctly addressed to<br><br><a href="https://gis.mydomain.com/geoserver/wms">https://gis.mydomain.com/geoserver/wms</a> and the response is ok , but<br>sometimes apparently random a few of that requests fails with 403<br>Forbidden error, altought the same request is working after half a<br>second. There's any logic on the errors, just happens after a few time<br>browsing.. then works then happens again.<br><br>Apache logs and geoserver logs don't file any error on these requests and<br>using ssl with the machine hostname inside our network works fine, so<br>the problem is on the gateway configuration.<br><br>Any clue on how should be configurated the gateway proxy? Other<br>directives than these?<br><br> ProxyPreserveHost On<br> ProxyPass /geoserver <a href="https://mygeonode/geoserver">https://mygeonode/geoserver</a><br> ProxyPassReverse /geoserver <a href="https://mygeonode/geoserver">https://mygeonode/geoserver</a><br><br><br>Amedeo Fadini<br>_______________________________________________<br>geonode-users mailing list<br><a href="mailto:geonode-users@lists.osgeo.org">geonode-users@lists.osgeo.org</a><br>http://lists.osgeo.org/mailman/listinfo/geonode-users<br></blockquote></div><br></div></body></html>