Cannot access https sites on NAS

Topics including remote access and management can go here, including port forwarding, telnet, ssh, and advanced network settings.
Forum rules
This is a user forum for Synology users to share experience/help out each other: if you need direct assistance from the Synology technical support team, please use the following form:
https://myds.synology.com/support/suppo ... p?lang=enu

Cannot access https sites on NAS

Postby Coolrunnings » Fri Jun 01, 2012 8:11 pm

Hi,

I'd like to access my local SAB, sickbeard, couchpotato and other sites I host on my NAS through https.
I've followed the tips 'n tricks in this topic.
I've created a reversed-proxy.conf-file with settings for access through port 80 and settings through port 443.

The reversed-proxy.conf-file is configured with the following settings:

Code: Select all
<ifModule !proxy_module>
        LoadModule proxy_module modules/mod_proxy.so
        LoadModule proxy_connect_module modules/mod_proxy_connect.so
        LoadModule proxy_http_module modules/mod_proxy_http.so
</IfModule>

NameVirtualHost *:80

<VirtualHost *:80>
        ServerName blog.mydomain.net
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://localhost/wordpress/
        ProxyPassReverse / http://localhost/wordpress/
</VirtualHost>

<VirtualHost *:80>
        ServerName sickbeard.mydomain.net
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://localhost:8081/
        ProxyPassReverse / http://localhost:8081/
</VirtualHost>

<VirtualHost *:80>
        ServerName plex.mydomain.net
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://localhost:32400/
        ProxyPassReverse / http://localhost:32400/
</VirtualHost>

<VirtualHost *:80>
        ServerName couchpotato.mydomain.net
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://localhost:8083/
        ProxyPassReverse / http://localhost:8083/
</VirtualHost>

<VirtualHost *:80>
        ServerName sabnzbd.mydomain.net
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / http://localhost:8080/
        ProxyPassReverse / http://localhost:8080/
</VirtualHost>

NameVirtualHost *:443

<VirtualHost *:443>
        ServerName synoadmin.mydomain.net
        SSLCipherSuite HIGH:MEDIUM
        SSLProtocol all -SSLv2
        SSLCertificateFile /usr/syno/etc/ssl/ssl.crt/server.crt
        SSLCertificateKeyFile /usr/syno/etc/ssl/ssl.key/server.key
        SSLEngine on
        SSLProxyEngine on
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / https://localhost:5001/
        ProxyPassReverse / https://localhost:5001/
</VirtualHost>


<VirtualHost *:443>
        ServerName sickbeard.mydomain.net
        SSLCipherSuite HIGH:MEDIUM
        SSLProtocol all -SSLv2
        SSLCertificateFile /usr/syno/etc/ssl/ssl.crt/server.crt
        SSLCertificateKeyFile /usr/syno/etc/ssl/ssl.key/server.key
        SSLEngine on
        SSLProxyEngine on
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / https://localhost:8081/
        ProxyPassReverse / https://localhost:8081/
</VirtualHost>

<VirtualHost *:443>
        ServerName plex.mydomain.net
        SSLCipherSuite HIGH:MEDIUM
        SSLProtocol all -SSLv2
        SSLCertificateFile /usr/syno/etc/ssl/ssl.crt/server.crt
        SSLCertificateKeyFile /usr/syno/etc/ssl/ssl.key/server.key
        SSLEngine on
        SSLProxyEngine on
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / https://localhost:32400/
        ProxyPassReverse / https://localhost:32400/
</VirtualHost>

<VirtualHost *:443>
        ServerName couchpotato.mydomain.net
        SSLCipherSuite HIGH:MEDIUM
        SSLProtocol all -SSLv2
        SSLCertificateFile /usr/syno/etc/ssl/ssl.crt/server.crt
        SSLCertificateKeyFile /usr/syno/etc/ssl/ssl.key/server.key
        SSLEngine on
        SSLProxyEngine on
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / https://localhost:8083/
        ProxyPassReverse / https://localhost:8083/
</VirtualHost>

<VirtualHost *:443>
        ServerName sabnzbd.mydomain.net
        SSLCipherSuite HIGH:MEDIUM
        SSLProtocol all -SSLv2
        SSLCertificateFile /usr/syno/etc/ssl/ssl.crt/server.crt
        SSLCertificateKeyFile /usr/syno/etc/ssl/ssl.key/server.key
        SSLEngine on
        SSLProxyEngine on
        ProxyRequests Off
        ProxyVia Off
        <Proxy *>
                Order deny,allow
                Allow from all
        </Proxy>
        ProxyPass / https://localhost:8080/
        ProxyPassReverse / https://localhost:8080/
</VirtualHost>


Access to DSM is now only possible through https.

Access to the other sites is possible throught http, but when I try to access them through https, I receive the following error:

Code: Select all
Proxy Error

The proxy server could not handle the request GET /.
Reason: Error during SSL Handshake with remote server

Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.


What did I forget????
Coolrunnings
I'm New!
I'm New!
 
Posts: 1
Joined: Fri Jun 01, 2012 7:44 pm

Return to Remote Access and Network Management

Who is online

Users browsing this forum: No registered users and 5 guests