Issue with Apache reverse proxy

Hello,

I'm trying to setup PSONO (Docker) behind an Apache reverse proxy. I use OIDC to authenticate the user through WSO2 IDP. I tried with NGINX reverse proxy and it works like a charm. But our infra use currently Apache v2.4.6 (CentOS7) as reverse proxy.

  1. I can see PSONO CLI and click on OIDC button.
  2. I can fill the authentication form for my Login & Password requested by WSOis
  3. I can confirm my consent about claims
  4. Then when I receive my callback URL i get this error

image

Hereunder my callback url

https://vault.example.com/server/oidc/1/callback/?code=0a54d59d-cd38-3b10-970c-22129ef7ce1e&state=m2NEydMWCsJRgoKyeWlb4dvhwvROf37cZ5ofKQmOLUbIXeJl&session_state=a1ef0a07fb6e4734215480f51aa9bf3afb71ff85e98b25e79fe895aa855f0cf6.tA7OWEPQNG3qXad0bXnvIg

This is my Apache configuration file (please note that is before <Location /server>):

<VirtualHost 192.168.213.128:443>
	
	ServerName <vault.example.com>
	
	
	Header always add Strict-Transport-Security "max-age=15768000"
    Header always append X-Frame-Options DENY
    Header set X-Content-Type-Options nosniff
    Header set X-XSS-Protection "1; mode=block"
    Header always set Referrer-Policy "same-origin"
    Header set Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; img-src 'self' data:; script-src 'self'; style-src 'self' 'unsafe-inline'; object-src 'self'; form-action 'self'"

	SSLEngine on

    # from https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=apache-2.4.18&openssl=1.0.2g&hsts=yes&profile=modern
    SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1
    SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
    SSLHonorCipherOrder     on
    SSLCompression          off
    SSLSessionTickets       off
    SSLUseStapling          on
    SSLStaplingResponderTimeout 5
    SSLStaplingReturnResponderErrors off

	SSLCertificateFile    "/home/SSLCerttAndIntermediateCert.cer"
	SSLCertificateKeyFile "/home/private_key.key"
	ServerSignature Off
	ProxyPreserveHost On
	
	<Location />
		ProxyPass https://vault.local.net:8084/
		ProxyPassReverse https://vault.local.net:8084/
		Order allow,deny
		Allow from all
	</Location>
	
	<Location /server>
		RewriteEngine on
		RewriteRule ^/server/(.*) /$1 [B]
		# Header set Host vault.example.com
		# Header set X-Real-IP 192.168.213.128
		# Header set X-Forwarded-For 192.168.213.128
		# Header set X-Forwarded-Port "443"
		# Header set X-Forwarded-Proto "https"
		Header add Pragma "no-cache"	
		Header add Cache-Control "private, max-age=0, no-cache, no-store"	
		Header unset Etag
		FileETag none		
		#Require all granted
		ProxyPass https://vault.local.net:8083
		ProxyPassReverse https://vault.local.net:8083
		Order allow,deny
		Allow from all
	</Location>
	
</VirtualHost>

Hereunder my apache error logs:

[Sat May 01 11:03:34.876338 2021] [ssl:debug] [pid 24124] ssl_engine_io.c(993): [client 192.168.213.1:61010] AH02001: Connection closed to child 4 with standard shutdown (server vault.example.com:443)
[Sat May 01 11:03:35.933969 2021] [ssl:debug] [pid 24132] ssl_engine_kernel.c(225): [client 192.168.213.1:61015] AH02034: Initial (No.1) HTTPS request received for child 11 (server vault.example.com:443), referer: https://vault.example.com/
[Sat May 01 11:03:35.934033 2021] [authz_core:debug] [pid 24132] mod_authz_core.c(835): [client 192.168.213.1:61015] AH01628: authorization result: granted (no directives), referer: https://vault.example.com/
[Sat May 01 11:03:35.934067 2021] [proxy:debug] [pid 24132] mod_proxy.c(1123): [client 192.168.213.1:61015] AH01143: Running scheme http handler (attempt 0), referer: https://vault.example.com/
[Sat May 01 11:03:35.934071 2021] [proxy_ajp:debug] [pid 24132] mod_proxy_ajp.c(722): [client 192.168.213.1:61015] AH00894: declining URL http://vault.example.com:8083/info/, referer: https://vault.example.com/
[Sat May 01 11:03:35.934074 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(972): [client 192.168.213.1:61015] AH01076: url: http://vault.example.com:8083/info/ proxyname: (null) proxyport: 0, referer: https://vault.example.com/
[Sat May 01 11:03:35.934076 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(975): [client 192.168.213.1:61015] AH01077: declining URL http://vault.example.com:8083/info/, referer: https://vault.example.com/
[Sat May 01 11:03:35.934079 2021] [proxy:debug] [pid 24132] proxy_util.c(2209): AH00942: HTTP: has acquired connection for (vault.example.com)
[Sat May 01 11:03:35.934083 2021] [proxy:debug] [pid 24132] proxy_util.c(2262): [client 192.168.213.1:61015] AH00944: connecting http://vault.example.com:8083/info/ to vault.example.com:8083, referer: https://vault.example.com/
[Sat May 01 11:03:35.934087 2021] [proxy:debug] [pid 24132] proxy_util.c(2442): [client 192.168.213.1:61015] AH00947: connected /info/ to vault.example.com:8083, referer: https://vault.example.com/
[Sat May 01 11:03:35.935154 2021] [proxy:debug] [pid 24132] proxy_util.c(2818): AH02824: HTTP: connection established with 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:35.935196 2021] [proxy:debug] [pid 24132] proxy_util.c(2985): AH00962: HTTP: connection complete to 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:35.938725 2021] [proxy:debug] [pid 24132] proxy_util.c(2224): AH00943: http: has released connection for (vault.example.com)
[Sat May 01 11:03:35.938774 2021] [headers:debug] [pid 24132] mod_headers.c(823): AH01502: headers: ap_headers_output_filter()
[Sat May 01 11:03:36.001181 2021] [ssl:debug] [pid 24132] ssl_engine_kernel.c(225): [client 192.168.213.1:61015] AH02034: Subsequent (No.2) HTTPS request received for child 11 (server vault.example.com:443), referer: https://vault.example.com/
[Sat May 01 11:03:36.001266 2021] [authz_core:debug] [pid 24132] mod_authz_core.c(835): [client 192.168.213.1:61015] AH01628: authorization result: granted (no directives), referer: https://vault.example.com/
[Sat May 01 11:03:36.001296 2021] [proxy:debug] [pid 24132] mod_proxy.c(1123): [client 192.168.213.1:61015] AH01143: Running scheme http handler (attempt 0), referer: https://vault.example.com/
[Sat May 01 11:03:36.001300 2021] [proxy_ajp:debug] [pid 24132] mod_proxy_ajp.c(722): [client 192.168.213.1:61015] AH00894: declining URL http://vault.example.com:8083/oidc/1/initiate-login/, referer: https://vault.example.com/
[Sat May 01 11:03:36.001303 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(972): [client 192.168.213.1:61015] AH01076: url: http://vault.example.com:8083/oidc/1/initiate-login/ proxyname: (null) proxyport: 0, referer: https://vault.example.com/
[Sat May 01 11:03:36.001305 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(975): [client 192.168.213.1:61015] AH01077: declining URL http://vault.example.com:8083/oidc/1/initiate-login/, referer: https://vault.example.com/
[Sat May 01 11:03:36.001309 2021] [proxy:debug] [pid 24132] proxy_util.c(2209): AH00942: HTTP: has acquired connection for (vault.example.com)
[Sat May 01 11:03:36.001312 2021] [proxy:debug] [pid 24132] proxy_util.c(2262): [client 192.168.213.1:61015] AH00944: connecting http://vault.example.com:8083/oidc/1/initiate-login/ to vault.example.com:8083, referer: https://vault.example.com/
[Sat May 01 11:03:36.001325 2021] [proxy:debug] [pid 24132] proxy_util.c(2442): [client 192.168.213.1:61015] AH00947: connected /oidc/1/initiate-login/ to vault.example.com:8083, referer: https://vault.example.com/
[Sat May 01 11:03:36.001793 2021] [proxy:debug] [pid 24132] proxy_util.c(2678): AH00951: HTTP: backend socket is disconnected.
[Sat May 01 11:03:36.002766 2021] [proxy:debug] [pid 24132] proxy_util.c(2818): AH02824: HTTP: connection established with 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:36.002810 2021] [proxy:debug] [pid 24132] proxy_util.c(2985): AH00962: HTTP: connection complete to 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:36.042545 2021] [proxy:debug] [pid 24132] proxy_util.c(2224): AH00943: http: has released connection for (vault.example.com)
[Sat May 01 11:03:36.042632 2021] [headers:debug] [pid 24132] mod_headers.c(823): AH01502: headers: ap_headers_output_filter()
[Sat May 01 11:03:36.060627 2021] [ssl:debug] [pid 24132] ssl_engine_kernel.c(225): [client 192.168.213.1:61015] AH02034: Subsequent (No.3) HTTPS request received for child 11 (server vault.example.com:443), referer: https://vault.example.com/
[Sat May 01 11:03:36.060805 2021] [authz_core:debug] [pid 24132] mod_authz_core.c(835): [client 192.168.213.1:61015] AH01628: authorization result: granted (no directives), referer: https://vault.example.com/
[Sat May 01 11:03:36.061049 2021] [proxy:debug] [pid 24132] mod_proxy.c(1123): [client 192.168.213.1:61015] AH01143: Running scheme http handler (attempt 0), referer: https://vault.example.com/
[Sat May 01 11:03:36.061066 2021] [proxy_ajp:debug] [pid 24132] mod_proxy_ajp.c(722): [client 192.168.213.1:61015] AH00894: declining URL http://vault.example.com:8083/oidc/proxy-redirect/8b8cdd3b-5584-4d23-b78e-846c4a8a9ade/, referer: https://vault.example.com/
[Sat May 01 11:03:36.061070 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(972): [client 192.168.213.1:61015] AH01076: url: http://vault.example.com:8083/oidc/proxy-redirect/8b8cdd3b-5584-4d23-b78e-846c4a8a9ade/ proxyname: (null) proxyport: 0, referer: https://vault.example.com/
[Sat May 01 11:03:36.061073 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(975): [client 192.168.213.1:61015] AH01077: declining URL http://vault.example.com:8083/oidc/proxy-redirect/8b8cdd3b-5584-4d23-b78e-846c4a8a9ade/, referer: https://vault.example.com/
[Sat May 01 11:03:36.061077 2021] [proxy:debug] [pid 24132] proxy_util.c(2209): AH00942: HTTP: has acquired connection for (vault.example.com)
[Sat May 01 11:03:36.061080 2021] [proxy:debug] [pid 24132] proxy_util.c(2262): [client 192.168.213.1:61015] AH00944: connecting http://vault.example.com:8083/oidc/proxy-redirect/8b8cdd3b-5584-4d23-b78e-846c4a8a9ade/ to vault.example.com:8083, referer: https://vault.example.com/
[Sat May 01 11:03:36.061084 2021] [proxy:debug] [pid 24132] proxy_util.c(2442): [client 192.168.213.1:61015] AH00947: connected /oidc/proxy-redirect/8b8cdd3b-5584-4d23-b78e-846c4a8a9ade/ to vault.example.com:8083, referer: https://vault.example.com/
[Sat May 01 11:03:36.061303 2021] [proxy:debug] [pid 24132] proxy_util.c(2678): AH00951: HTTP: backend socket is disconnected.
[Sat May 01 11:03:36.063373 2021] [proxy:debug] [pid 24132] proxy_util.c(2818): AH02824: HTTP: connection established with 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:36.063461 2021] [proxy:debug] [pid 24132] proxy_util.c(2985): AH00962: HTTP: connection complete to 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:36.083787 2021] [proxy:debug] [pid 24132] proxy_util.c(2224): AH00943: http: has released connection for (vault.example.com)
[Sat May 01 11:03:36.083835 2021] [headers:debug] [pid 24132] mod_headers.c(823): AH01502: headers: ap_headers_output_filter()
[Sat May 01 11:03:36.122843 2021] [ssl:info] [pid 24128] SSL Library Error: error:140800FF:SSL routines:ssl3_accept:unknown state
[Sat May 01 11:03:36.122887 2021] [ssl:info] [pid 24128] [client 192.168.213.129:45694] AH01998: Connection closed to child 7 with abortive shutdown (server vault.example.com:443)
[Sat May 01 11:03:38.202143 2021] [ssl:debug] [pid 24132] ssl_engine_kernel.c(225): [client 192.168.213.1:61015] AH02034: Subsequent (No.4) HTTPS request received for child 11 (server vault.example.com:443), referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202265 2021] [authz_core:debug] [pid 24132] mod_authz_core.c(835): [client 192.168.213.1:61015] AH01628: authorization result: granted (no directives), referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202299 2021] [proxy:debug] [pid 24132] mod_proxy.c(1123): [client 192.168.213.1:61015] AH01143: Running scheme http handler (attempt 0), referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202305 2021] [proxy_ajp:debug] [pid 24132] mod_proxy_ajp.c(722): [client 192.168.213.1:61015] AH00894: declining URL http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202308 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(972): [client 192.168.213.1:61015] AH01076: url: http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ proxyname: (null) proxyport: 0, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202311 2021] [proxy_fcgi:debug] [pid 24132] mod_proxy_fcgi.c(975): [client 192.168.213.1:61015] AH01077: declining URL http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202347 2021] [proxy:debug] [pid 24132] proxy_util.c(2209): AH00942: HTTP: has acquired connection for (vault.example.com)
[Sat May 01 11:03:38.202352 2021] [proxy:debug] [pid 24132] proxy_util.c(2262): [client 192.168.213.1:61015] AH00944: connecting http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ to vault.example.com:8083, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202356 2021] [proxy:debug] [pid 24132] proxy_util.c(2442): [client 192.168.213.1:61015] AH00947: connected /oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ to vault.example.com:8083, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.202532 2021] [proxy:debug] [pid 24132] proxy_util.c(2678): AH00951: HTTP: backend socket is disconnected.
[Sat May 01 11:03:38.203633 2021] [proxy:debug] [pid 24132] proxy_util.c(2818): AH02824: HTTP: connection established with 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:38.203676 2021] [proxy:debug] [pid 24132] proxy_util.c(2985): AH00962: HTTP: connection complete to 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:38.544607 2021] [proxy_http:error] [pid 24132] (20014)Internal error: [client 192.168.213.1:61015] AH01102: error reading status line from remote server vault.example.com:8083, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.544660 2021] [proxy_http:debug] [pid 24132] mod_proxy_http.c(1328): [client 192.168.213.1:61015] AH01104: Closing connection to client because reading from backend server vault.example.com:8083 failed. Number of keepalives 3, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.544677 2021] [headers:debug] [pid 24132] mod_headers.c(823): AH01502: headers: ap_headers_output_filter()
[Sat May 01 11:03:38.544845 2021] [ssl:debug] [pid 24132] ssl_engine_io.c(993): [client 192.168.213.1:61015] AH02001: Connection closed to child 11 with standard shutdown (server vault.example.com:443)
[Sat May 01 11:03:38.544877 2021] [proxy:debug] [pid 24132] proxy_util.c(2224): AH00943: HTTP: has released connection for (vault.example.com)
[Sat May 01 11:03:38.544884 2021] [proxy:debug] [pid 24132] proxy_util.c(2926): [remote 192.168.213.129:8083] AH02642: proxy: connection shutdown
[Sat May 01 11:03:38.554808 2021] [ssl:debug] [pid 24133] ssl_engine_kernel.c(225): [client 192.168.213.1:61017] AH02034: Initial (No.1) HTTPS request received for child 12 (server vault.example.com:443), referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.555049 2021] [authz_core:debug] [pid 24133] mod_authz_core.c(835): [client 192.168.213.1:61017] AH01628: authorization result: granted (no directives), referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.555902 2021] [proxy:debug] [pid 24133] mod_proxy.c(1123): [client 192.168.213.1:61017] AH01143: Running scheme http handler (attempt 0), referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.556098 2021] [proxy_ajp:debug] [pid 24133] mod_proxy_ajp.c(722): [client 192.168.213.1:61017] AH00894: declining URL http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.556109 2021] [proxy_fcgi:debug] [pid 24133] mod_proxy_fcgi.c(972): [client 192.168.213.1:61017] AH01076: url: http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ proxyname: (null) proxyport: 0, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.556112 2021] [proxy_fcgi:debug] [pid 24133] mod_proxy_fcgi.c(975): [client 192.168.213.1:61017] AH01077: declining URL http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.556121 2021] [proxy:debug] [pid 24133] proxy_util.c(2209): AH00942: HTTP: has acquired connection for (vault.example.com)
[Sat May 01 11:03:38.556127 2021] [proxy:debug] [pid 24133] proxy_util.c(2262): [client 192.168.213.1:61017] AH00944: connecting http://vault.example.com:8083/oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ to vault.example.com:8083, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.558416 2021] [proxy:debug] [pid 24133] proxy_util.c(2442): [client 192.168.213.1:61017] AH00947: connected /oidc/1/callback/?code=24a14d17-1da7-3fb2-8cea-5f8d99e45bf8&state=YwiEHnHAArsVbgIezQmgl72PpJQB61GrVq45QizAORY1pxuO&session_state=e255fd989236e95f454bd193c7e53329849e00e7c8760fe053011464f9c3d272.9lcuCdQvQJfCgS0vnzq1WQ to vault.example.com:8083, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.559481 2021] [proxy:debug] [pid 24133] proxy_util.c(2818): AH02824: HTTP: connection established with 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:38.559546 2021] [proxy:debug] [pid 24133] proxy_util.c(2985): AH00962: HTTP: connection complete to 192.168.213.129:8083 (vault.example.com)
[Sat May 01 11:03:38.827291 2021] [proxy_http:error] [pid 24133] (20014)Internal error: [client 192.168.213.1:61017] AH01102: error reading status line from remote server vault.example.com:8083, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.827355 2021] [proxy_http:debug] [pid 24133] mod_proxy_http.c(1363): [client 192.168.213.1:61017] AH01105: NOT Closing connection to client although reading from backend server vault.example.com:8083 failed., referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.827367 2021] [proxy:error] [pid 24133] [client 192.168.213.1:61017] AH00898: Error reading from remote server returned by /server/oidc/1/callback/, referer: https://identity.glab.tasf.fr/
[Sat May 01 11:03:38.827370 2021] [proxy:debug] [pid 24133] proxy_util.c(2224): AH00943: HTTP: has released connection for (vault.example.com)
[Sat May 01 11:03:38.827379 2021] [proxy:debug] [pid 24133] proxy_util.c(2926): [remote 192.168.213.129:8083] AH02642: proxy: connection shutdown
[Sat May 01 11:03:38.827551 2021] [headers:debug] [pid 24133] mod_headers.c(848): AH01503: headers: ap_headers_error_filter()
[Sat May 01 11:03:40.673740 2021] [ssl:debug] [pid 24133] ssl_engine_kernel.c(225): [client 192.168.213.1:61017] AH02034: Subsequent (No.2) HTTPS request received for child 12 (server vault.example.com:443), referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.673820 2021] [authz_core:debug] [pid 24133] mod_authz_core.c(835): [client 192.168.213.1:61017] AH01628: authorization result: granted (no directives), referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.673851 2021] [proxy:debug] [pid 24133] mod_proxy.c(1123): [client 192.168.213.1:61017] AH01143: Running scheme http handler (attempt 0), referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.673855 2021] [proxy_ajp:debug] [pid 24133] mod_proxy_ajp.c(722): [client 192.168.213.1:61017] AH00894: declining URL http://vault.example.com:8084/service-worker.js, referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.673858 2021] [proxy_fcgi:debug] [pid 24133] mod_proxy_fcgi.c(972): [client 192.168.213.1:61017] AH01076: url: http://vault.example.com:8084/service-worker.js proxyname: (null) proxyport: 0, referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.673860 2021] [proxy_fcgi:debug] [pid 24133] mod_proxy_fcgi.c(975): [client 192.168.213.1:61017] AH01077: declining URL http://vault.example.com:8084/service-worker.js, referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.673863 2021] [proxy:debug] [pid 24133] proxy_util.c(2209): AH00942: HTTP: has acquired connection for (vault.example.com)
[Sat May 01 11:03:40.673869 2021] [proxy:debug] [pid 24133] proxy_util.c(2262): [client 192.168.213.1:61017] AH00944: connecting http://vault.example.com:8084/service-worker.js to vault.example.com:8084, referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.673980 2021] [proxy:debug] [pid 24133] proxy_util.c(2442): [client 192.168.213.1:61017] AH00947: connected /service-worker.js to vault.example.com:8084, referer: https://vault.example.com/service-worker.js
[Sat May 01 11:03:40.674691 2021] [proxy:debug] [pid 24133] proxy_util.c(2818): AH02824: HTTP: connection established with 192.168.213.129:8084 (vault.example.com)
[Sat May 01 11:03:40.674744 2021] [proxy:debug] [pid 24133] proxy_util.c(2985): AH00962: HTTP: connection complete to 192.168.213.129:8084 (vault.example.com)
[Sat May 01 11:03:40.676332 2021] [proxy:debug] [pid 24133] proxy_util.c(2224): AH00943: http: has released connection for (vault.example.com)
[Sat May 01 11:03:40.676381 2021] [headers:debug] [pid 24133] mod_headers.c(823): AH01502: headers: ap_headers_output_filter()

If I try to set after <Location /server> then I get this error:

image

AS you can see in my apache configuration file I did not set yet the fileserver.

I am blocked since several days on that issue. I am sure that I made mistakes but I do not see where and how to solve them.

Please if you have any idea or sample apache reverse proxy configuration file to share, It willbe welcome.

Thank you for your support.

Edited by Ketchup