zarafa mapi proxy outlook.

thctlo

Hai,

Bit of an old school question, but i cant my https proxy for outlook running.

I did read the zarafa and kopano docs but i keep getting
“HTTP GET method not implemented” / Internal server errror 500
What i want, if its possible.

internet => apache2.4 SSL port 237 => apache 2.2 > zarafa server port 236
an outlook client with the outlook connector to connect to hostname.fqdn:237 with should be proxied to the internal server ( non-ssl )

I’ve setup my apache 2.4 for server on ip_internet:237 to listen.

ServerName is set.

SSLEngine on
SSLProxyEngine Off
ProxyPreserveHost On
<IfModule mod_proxy.c>
        ProxyPass /zarafa http://192.168.xxxx.xxx:236/zarafa retry=0
        ProxyPassReverse /zarafa http://192.168.xxxx.xxx:236/zarafa retry=0
        # tested also these line with the hostname of that server. but same arror
</IfModule>

what am im missing.

mkromer

Hi,

generally speaking it is not a good idea to do SSL -> non-ssl termination, as the proxy will redirect any traffic backwards and expect to for example do an HTTPS-handshake, based on what you’ve configured in the client.

The following is a functional example of

redirect all traffic to HTTPS (if not set)
redirect any direct request to mywebapp.example.com to webapp
redirect any /zarafa request to port 236 on the local system

RewriteEngine on
RedirectMatch ^/$ https://mywebapp.example.com/webapp/
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]

<IfModule mod_proxy.c>
ProxyPass /zarafa http://localhost:236/zarafa
ProxyPassReverse /zarafa http://localhost:236/zarafa
</IfModule>

thctlo

Ok, thank you for this. very appriciated.

Your example is what i have already have for my webapp, which works fine,
but for the outlook client ( over port 237) not. is it that not proxiable?

I’ve now also set the following now in the vhost for outlook.
ProxyPreserveHost On
SSLProxyEngine Off
ProxyRequests Off
SSLProxyVerify none
SSLProxyCheckPeerCN off
SSLProxyCheckPeerName off
SSLProxyCheckPeerExpire off

any other suggestion? im running out of ideas… :-(