# ll /etc/apache2/ssl/glance/
total 16
dr-xr-xr-x 2 root root 4096 Oct 12 12:48 ./
dr-xr-xr-x 3 root root 4096 Oct 12 12:48 ../
-r--r--r-- 1 root root 1017 Oct 12 12:48 cert_glance.example.com
-r--r--r-- 1 root root 1704 Oct 12 12:48 key_glance.example.com
[/etc/apache2/sites-enabled/openstack_https_frontend.conf]
Listen 9282
<VirtualHost 192.168.151.126:9282>
ServerName glance.example.com
SSLEngine on
SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!EXP:!LOW:!MEDIUM
SSLCertificateFile /etc/apache2/ssl/glance/cert_glance.example.com
# See LP 1484489 - this is to support <= 2.4.7 and >= 2.4.8
SSLCertificateChainFile /etc/apache2/ssl/glance/cert_glance.example.com
SSLCertificateKeyFile /etc/apache2/ssl/glance/key_glance.example.com
ProxyPass / http://localhost:9272/
ProxyPassReverse / http://localhost:9272/
ProxyPreserveHost on
RequestHeader set X-Forwarded-Proto "https"
</VirtualHost>
<VirtualHost 192.168.152.122:9282>
ServerName glance.example.com
SSLEngine on
SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite HIGH:!RC4:!MD5:!aNULL:!eNULL:!EXP:!LOW:!MEDIUM
SSLCertificateFile /etc/apache2/ssl/glance/cert_glance.example.com
# See LP 1484489 - this is to support <= 2.4.7 and >= 2.4.8
SSLCertificateChainFile /etc/apache2/ssl/glance/cert_glance.example.com
SSLCertificateKeyFile /etc/apache2/ssl/glance/key_glance.example.com
ProxyPass / http://localhost:9272/
ProxyPassReverse / http://localhost:9272/
ProxyPreserveHost on
RequestHeader set X-Forwarded-Proto "https"
</VirtualHost>
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
<Location />
Order allow,deny
Allow from all
</Location>
The result with rev. 259.
# ll /etc/apache2/ ssl/glance/ example. com example. com
total 16
dr-xr-xr-x 2 root root 4096 Oct 12 12:48 ./
dr-xr-xr-x 3 root root 4096 Oct 12 12:48 ../
-r--r--r-- 1 root root 1017 Oct 12 12:48 cert_glance.
-r--r--r-- 1 root root 1704 Oct 12 12:48 key_glance.
[/etc/apache2/ sites-enabled/ openstack_ https_frontend. conf] 151.126: 9282> !MD5:!aNULL: !eNULL: !EXP:!LOW: !MEDIUM ateFile /etc/apache2/ ssl/glance/ cert_glance. example. com ateChainFile /etc/apache2/ ssl/glance/ cert_glance. example. com ateKeyFile /etc/apache2/ ssl/glance/ key_glance. example. com localhost: 9272/ verse / http:// localhost: 9272/ veHost on 152.122: 9282> !MD5:!aNULL: !eNULL: !EXP:!LOW: !MEDIUM ateFile /etc/apache2/ ssl/glance/ cert_glance. example. com ateChainFile /etc/apache2/ ssl/glance/ cert_glance. example. com ateKeyFile /etc/apache2/ ssl/glance/ key_glance. example. com localhost: 9272/ verse / http:// localhost: 9272/ veHost on
Listen 9282
<VirtualHost 192.168.
ServerName glance.example.com
SSLEngine on
SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite HIGH:!RC4:
SSLCertific
# See LP 1484489 - this is to support <= 2.4.7 and >= 2.4.8
SSLCertific
SSLCertific
ProxyPass / http://
ProxyPassRe
ProxyPreser
RequestHeader set X-Forwarded-Proto "https"
</VirtualHost>
<VirtualHost 192.168.
ServerName glance.example.com
SSLEngine on
SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite HIGH:!RC4:
SSLCertific
# See LP 1484489 - this is to support <= 2.4.7 and >= 2.4.8
SSLCertific
SSLCertific
ProxyPass / http://
ProxyPassRe
ProxyPreser
RequestHeader set X-Forwarded-Proto "https"
</VirtualHost>
<Proxy *>
Order deny,allow
Allow from all
</Proxy>
<Location />
Order allow,deny
Allow from all
</Location>