Question about ProxyConfig

[david2905]

Hello together,

I get some errors in my log, where I am not understanding why it comes from.vaultwarden is working. To my setup vaultwarden is running behind a apache proxy.
In the Apache error log I get this

[proxy_http:error] [pid 121759:tid 140013878617792] (70014)End of file found: [client <CLIENT_IP>:42998] AH01102: error reading status line from remote server server.domain:7443
[proxy:error] [pid 121759:tid 140013878617792] [client 141.14.17.191:42998] AH00898: Error reading from remote server returned by /notifications/hub
[proxy_http:error] [pid 122374:tid 140014276179648] (70014)End of file found: [client <CLIENT_IP>:58576] AH01102: error reading status line from remote server server.domain:7443
[proxy:error] [pid 122374:tid 140014276179648] [client 141.14.17.191:58576] AH00898: Error reading from remote server returned by /notifications/hub
[proxy_http:error] [pid 122374:tid 140013987690176] (70014)End of file found: [client <CLIENT_IP>:58780] AH01102: error reading status line from remote server server.domain:7443
[proxy:error] [pid 122374:tid 140013987690176] [client 141.14.17.191:58780] AH00898: Error reading from remote server returned by /notifications/hub
[proxy_http:error] [pid 121758:tid 140013878617792] (70014)End of file found: [client <CLIENT_IP>:41916] AH01102: error reading status line from remote server server.domain:7443
[proxy:error] [pid 121758:tid 140013878617792] [client 141.14.17.191:41916] AH00898: Error reading from remote server returned by /notifications/hub

and in the vaultwarden.log

[rocket_http::tls::listener][WARN] tls handshake with <SERVER_IP>:60274 failed: received corrupt message of type InvalidContentType
[rocket_http::tls::listener][WARN] tls handshake with <SERVER_IP>:46638 failed: received corrupt message of type InvalidContentType
[rocket_http::tls::listener][WARN] tls handshake with <SERVER_IP>:33236 failed: received corrupt message of type InvalidContentType
[rocket_http::tls::listener][WARN] tls handshake with <SERVER_IP>:55760 failed: received corrupt message of type InvalidContentType
[rocket_http::tls::listener][WARN] tls handshake with <SERVER_IP>:37116 failed: received corrupt message of type InvalidContentType

My Config looks like

export LOG_FILE=<LOGDIR>/log/vaultwarden.log

ROCKET_ADDRESS=<VAULT_IP>
ROCKET_PORT=7443
ROCKET_TLS={certs="cert.cert",key="key.key"}

export ROCKET_ADDRESS ROCKET_PORT ROCKET_TLS

export DOMAIN=https://server.domain

export SIGNUPS_ALLOWED=false

export ADMIN_TOKEN=****

export ENABLE_WEBSOCKET=true
export LOG_LEVEL=info

My Apache Config looks like

<VirtualHost server.domain>

  DocumentRoot "<PATH>/htdocs"
  ErrorLog     "<PATH>/ssl_error_log"
  TransferLog  "<PATH>/ssl_access_log"

  SSLEngine on

  SSLCertificateFile    "cert.cert"
  SSLCertificateKeyFile "key.key"


  <FilesMatch "\.(cgi|shtml|phtml|php)$">
      SSLOptions +StdEnvVars
  </FilesMatch>

  BrowserMatch "MSIE [2-5]" \
           nokeepalive ssl-unclean-shutdown \
           downgrade-1.0 force-response-1.0

  CustomLog "<PATH>/log/ssl_request_log" \
            "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
	    
  RewriteEngine on
  RewriteCond %{HTTP:Upgrade} =websocket
  RewriteRule /(.*) ws://server.domain:7443/$1 [P,L]
  ProxyPass / https://server.domain:7443/ connectiontimeout=60 timeout=60 keepalive=On
  ProxyPassReverse / https://server.domain:7443/ keepalive=On
  
  ProxyPreserveHost On
  ProxyRequests Off
  RequestHeader set X-Real-IP %{REMOTE_ADDR}s

</VirtualHost>

Maybe someone has hint for me what I am doing wrong.

Thanks a lot
David

[BlackDex]

I would suggest to check the proxy examples here: https://github.com/dani-garcia/vaultwarden/wiki/Proxy-examples
Although it looks like you mostly have the same, there are some extra items there which might be causing the messages you see.

[david2905]

Sorry for late reply
Yes you were right. I removed the Rewrite part and the Error are gone.

Thank you very much :-)

Here my new config

<VirtualHost server.domain>

  DocumentRoot "<PATH>/htdocs"
  ErrorLog     "<PATH>/ssl_error_log"
  TransferLog  "<PATH>/ssl_access_log"

  SSLEngine on

  SSLCertificateFile    "cert.cert"
  SSLCertificateKeyFile "key.key"


  <FilesMatch "\.(cgi|shtml|phtml|php)$">
      SSLOptions +StdEnvVars
  </FilesMatch>

  BrowserMatch "MSIE [2-5]" \
           nokeepalive ssl-unclean-shutdown \
           downgrade-1.0 force-response-1.0

  CustomLog "<PATH>/log/ssl_request_log" \
            "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
	    
  ProxyPass / https://server.domain:7443/ upgrade=websocket
  ProxyPassReverse / https://server.domain:7443/
  
  ProxyPreserveHost On
  ProxyRequests Off
  RequestHeader set X-Real-IP %{REMOTE_ADDR}s

</VirtualHost>