title: Issues with self-signed certificate behind an Apache reverse-proxy?
body: <p>I understand this topic was discussed in a couple of older posts, especially 
  <a href="https://stackoverflow.com/questions/12459975/will-a-self-signed-certificate-work-behind-an-apache-reverse-proxy">Will a self-signed certificate work behind an Apache reverse-proxy?</a> posted by @Ryan</p>
  
  <p>I am facing the same issue but unable to get around it. I have Apache  2.4.12 setup as reverse proxy  in front of an Oracle HTTP server. I have valid certs on the proxy server but self signed certs on Oracle HTTP server. The goal is to do https all the way through, but whenever the browser gets to myhost.domain, it throws a cert warning(because of self signed certs). Having authentic certs on Oracle HTTP server is not an option and the users browsers are restricted and hence cannot ignore the self signed cert warning. </p>
  
  <p>Here's my virtual host</p>
  
  <hr>
  
  <p></p>
  
  <pre><code>LogLevel ERROR
  ServerName  myhost.domain
  ServerAlias  xxx.xxx.xxx.xx
  DocumentRoot D:/xyz/pubdocs
  SSLEngine      On
  SSLProxyEngine On
  SSLCertificateFile      certs/myserver.crt
  SSLCertificateKeyFile   certs/myserver.key
  SSLCertificateChainFile certs/myserver_chain.crt
  SSLProxyCACertificateFile certs/my_self_signed.pem
  SSLProxyVerify none
  SSLProxyCheckPeerName off
  SSLProxyCheckPeerCN off
  SSLProxyCheckPeerExpire off
  SSLProtocol    -all +TLSv1
  SSLProxyProtocol +SSLv3 +TLSv1 +TLSv1.1
  #SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:!NULL:RC4+RSA:+HIGH:+MEDIUM
  ErrorLog "logs/abc-error.log"
  CustomLog "logs/abc-access.log" cert
  
  ProxyRequests Off  
  # IE compatibility
  Header set X-UA-Compatible "IE=EmulateIE8"
  # Prevent page from being loaded within an IFrame (Cross-Frame Scripting protection)
  Header always append X-Frame-Options SAMEORIGIN
  # Prevent mime sniffing exploint ; disabled breaks PEM Popup image rendering
  # Header set X-Content-Type-Options: nosniff
  # Disable caching
  Header set Cache-Control "no-cache, must-revalidate, private"
  # Enable X-XSS-Protection
  Header set X-XSS-Protection: "1; mode=block"
  ProxyPass / https://myhost.domain/
  ProxyPassReverse / https://myhost.domain/
  </code></pre>
  
  <hr>
  
  <p>It seems like using the following directives worked for many people, but doesnt seem to work for me</p>
  
  <p>SSLProxyVerify none</p>
  
  <p>SSLProxyCheckPeerName off</p>
  
  <p>SSLProxyCheckPeerCN off</p>
  
  <p>SSLProxyCheckPeerExpire off</p>
  
  <p>Is there anything else i am missing.</p>
  
  <p>Any help is appreciated.</p>
  
  <p>Thanks,
  Raj</p>