Installation guide

ManualsBrandsShoreTel ManualsComputer equipmentShoreWare

391

392

393

394

395

396

397

398

399

400

Example Reverse Proxy Configuration on a Linux Server Reverse Proxy Servers for ShoreTel Communicator on iPhone

ShoreTel 14.2 Planning and Installation Guide 399

RewriteEngine on

# uncomment the logging for problem trace only

# RewriteLog “logs/ciproxy.localhost-rewrite.log”

# RewriteLogLevel 3

# NOTE the rewrite rules have a proxy redirect

RewriteRule ^/theme/(.+)$ /director2/theme/$1 [P]

RewriteRule ^/yui_2.7.0/(.+)$ /director2/yui_2.7.0/$1 [P]

RewriteRule ^/js/(.+)$ /director2/js/$1 [P]

ProxyPass /authenticate/ http://10.0.0.1/

ProxyPassReverse /authenticate/ http://10.0.0.1/

ProxyPass /cas/ http://10.0.0.1:5447/

ProxyPassReverse /cas/ http://10.0.0.1:5447/

ProxyPass /director2/ http://10.0.0.1:5449/

ProxyPassReverse /director2/ http://10.0.0.1:5449/

# These are Optional

ErrorLog “logs/ciproxy.localhost-error.log”

CustomLog “logs/ciproxy.localhost-access.log” combined

# SSL Engine Switch:

# Enable/Disable SSL AND PROXYING OF SSL for this virtual host.

SSLEngine on

SSLProxyEngine on

# SSL Cipher Suite:

# List the ciphers that the client is permitted to negotiate.

# See the mod_ssl documentation for a complete list.

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

# Server Certificate:

# Point SSLCertificateFile at a PEM encoded certificate. If

# the certificate is encrypted, then you will be prompted for a

# pass phrase. Note that a kill -HUP will prompt again. Keep

# in mind that if you have both an RSA and a DSA certificate you

# can configure both in parallel (to also allow the use of DSA

# ciphers, etc.)

#SSLCertificateFile “conf/ssl.crt/server-dsa.crt”

SSLCertificateFile “conf/ssl.crt/server.crt”

# Server Private Key:

# If the key is not combined with the certificate, use this

# directive to point at the key file. Keep in mind that if

# you've both a RSA and a DSA private key you can configure

# both in parallel (to also allow the use of DSA ciphers, etc.)

#SSLCertificateKeyFile “conf/ssl.key/server-dsa.key”

SSLCertificateKeyFile “conf/ssl.key/server.key”