* Dr. Internet columnist Steve Blass offers advice on proxying SSL certificates to Apache via IIS
We have Apache and IIS Web servers. The Apache server has an SSL certificate from VeriSign installed. The IIS server has a self-signed SSL certificate. We want to make the SSL security alert from the self-signed certificate on the IIS server go away without having to buy another commercial SSL certificate. Can we drive all the SSL traffic through the Apache server to avoid the SSL security alerts?
The Apache modules mod_proxy and mod_rewrite can be configured so client browsers will talk to your IIS server through the Apache server. This will establish the SSL connections using the commercial SSL certificate, eliminating the browser security warning.
Add the statements
ProxyPass /mywebfolder https://iis.server.name/mywebfolder
and
ProxyPassReverse /mywebfolder https://iis.server.name/mywebfolder
to your Apache httpd.conf file, and then point a browser at https://apache.server.name/mywebfolder, to view IIS content through the Apache Web server connection.
Add the command
ProxyRequests off
to the httpd.conf file so the server will not honor proxy requests from browsers except to connect to your IIS server.




