HTTPS Proxy for existing HTTP application

Question

Hi,

I have a running HTTP web application and I am facing problems to make it run over HTTPS.

I am thinking of bringing some HTTPS Proxy that accepts user requests and forward it to the HTTP web app.

What do you think of that? and How can I accomplish that?

Answer 1

Apache httpd reverse-proxy?

Answer 2

It's possible to run Apache Httpd (for example) using HTTPS and use mod_proxy_http as a reverse proxy to forward the requests to your existing HTTP server. Of course, for this to be of any use, you'd need the reverse proxy and the target server to be connected in such a way that connections cannot be sniffed or altered.

You may find that the existing server needs certain extra settings for it to be aware it's using HTTPS (for example, special Valves in Apache Tomcat to set the HTTPS flag to true).

Answer 3

Setting up stunnel is a no-brainer - and its available for Unix/Linux/Posix/MSWindows (you might have mentioned what OS you are using).

(Also you can run the program to encrypt or decrpyt, at the server or at the client side)