Reverse proxy HTTPS

[Aerglonus]

I recently been trying Zoraxy but can't find a way to make it reverse proxy to an HTTPS server for example in NPM i can add it like this
(this example is for passbolt https server)

and this will use the https server instead, in Zoraxy i tried enabling the Require TLS option but it returns 404 not found when visiting the url.

is there a way to do something like in NPM or is this not supported in Zoraxy yet?

[tobychui]

I guess you have some invalid setting somewhere. Screenshot your zoraxy settings and put it here, otherwise there are nothing we can help.

[Aerglonus]

Sure this is the proxy record (in this screenshot Require TLS is disabled and opens the usual 400 request but when enabled it returns 404 not found)

With Require TLS Enabled

And here is the Global Settings

Nothing other than the added certificates is changed from the settings.

[tobychui]

@Aerglonus There are a few reasons for it. First of all, the 404 not found is probably not from Zoraxy but your proxied services. For your information, 404 page in Zoraxy looks like this.

Secondly, do your backend server (.1.65) used a self-sign certificate for the https? If yes, you will also need to enable Skip Verification. Otherwise, I would usually recommend proxying via HTTP if both of your nodes are within your private / local area network.

Thirdly, I assume that the 400 error does not origin from Zoraxy but your backend / other services. (Zoraxy will only shows error of 500, 521 and 404 as I remembered).

So I guess you really need to check your networking and config to see what external services is causing trouble in your routing setup. My best guess is that in order to make your origin server compatible with NPM (which is buggy and need a lot of hack to make them works together), you have modified some configs from your origin server. You might want to undo them if that is the case.

[Aerglonus]

need to enable Skip Verification
This was what i needed to do, i don't what was causing the 404 page but enabling this worked. ( to disabled it i just needed to force SSL on passbolt side.)

Thanks