Listen 8140

ProxyRequests Off


   BalancerMember http://127.0.0.1:18140 retry=30
   BalancerMember http://127.0.0.1:18141 retry=30



   ServerName puppet
    SSLEngine on
    SSLCipherSuite SSLv2:-LOW:-EXPORT:RC4+RSA
    SSLCertificateFile /var/lib/puppet/ssl/certs/puppet.pem
    SSLCertificateKeyFile /var/lib/puppet/ssl/private_keys/puppet.pem
    SSLCertificateChainFile /var/lib/puppet/ssl/ca/ca_crt.pem
    SSLCACertificateFile /var/lib/puppet/ssl/ca/ca_crt.pem
    # SSLCARevocationFile /var/lib/puppet/ssl/ca/ca_crl.pem
    SSLVerifyClient optional
    SSLVerifyDepth  1
    SSLOptions +StdEnvVars

    RequestHeader set X-Client-DN %{SSL_CLIENT_S_DN}e
    RequestHeader set X-Client-Verify %{SSL_CLIENT_VERIFY}e

    
       SetHandler balancer-manager
       Order allow,deny
       Allow from all
    

    ProxyPass / balancer://puppet:8140/
    ProxyPassReverse / balancer://puppet:8140/
    ProxyPreserveHost on