Not sure if this belongs on this forum, but wondering if there's a special way to request
certificates for proxypass/reverseproxy urls.
I'm troubleshooting some virtual hosts. My requests get issued certificates, and I've had certificates issued for both the WAN facing proxy server, and the back end httpd servers.
Is that he correct way to handle ssl certs for proxyied servers?
Thanks
The approach depends upon your network setup and what you need accessible and from where. For example, if your backends are only intended (or able) to be accessed via your proxy service then you would likely want to use your own CA for those connections. You likely only want your public internet facing connections to be serving publicly-trusted certificates to simplify your infrastructure and reserve your sanity.
5 Likes