Schannel Again in 2024

Getting loads of schannel errors in my log server every day, I decided to hunt them down.

Turns out that under Internet Options a GPO was misconfigured to allow sslv3 traffic.

Disabling this SSLv3 as shown below with a GPO or individually solves this log entry spam.

Apache Reverse Proxy Detail

edit the proxy.conf – vi /etc/httpd/conf.modules.d/00-proxy.conf

Load necessary modules

LoadModule rewrite_module modules/mod_rewrite.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule proxy_module modules/mod_proxy.so
LoadModule proxy_http_module modules/mod_proxy_http.so
LoadModule proxy_wstunnel_module modules/mod_proxy_wstunnel.so

Load lbmethod modules

LoadModule lbmethod_bybusyness_module modules/mod_lbmethod_bybusyness.so
LoadModule lbmethod_byrequests_module modules/mod_lbmethod_byrequests.so
LoadModule lbmethod_bytraffic_module modules/mod_lbmethod_bytraffic.so
LoadModule lbmethod_heartbeat_module modules/mod_lbmethod_heartbeat.so

Load additional proxy modules

LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
LoadModule proxy_balancer_module modules/mod_proxy_balancer.so
LoadModule proxy_connect_module modules/mod_proxy_connect.so
LoadModule proxy_express_module modules/mod_proxy_express.so
LoadModule proxy_fcgi_module modules/mod_proxy_fcgi.so
LoadModule proxy_fdpass_module modules/mod_proxy_fdpass.so
LoadModule proxy_ftp_module modules/mod_proxy_ftp.so
LoadModule proxy_hcheck_module modules/mod_proxy_hcheck.so
LoadModule proxy_scgi_module modules/mod_proxy_scgi.so
LoadModule proxy_uwsgi_module modules/mod_proxy_uwsgi.so
~

Edit your sites’ .conf file – vi /etc/httpd/sites-enabled/service.domainname.com.conf

VirtualHost *:443
ServerName service.domainname.com

SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/yourcert.crt
SSLCertificateKeyFile /etc/pki/tls/private/yourprivatekey_privatekey.key
SSLCertificateChainFile /etc/pki/tls/certs/bundle.crt

RewriteEngine on
RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteCond %{HTTP:Connection} upgrade [NC]
RewriteRule /(.*) "ws://backendserverIP:portnumber/$1" [P,L]

ProxyPreserveHost On
ProxyPass / http://backendserverIP:portnumber/
ProxyPassReverse / http://backendserverIP:portnumber/

ErrorLog /var/log/httpd/service.domainname.com/error.log
CustomLog /var/log/httpd/service.domainname.com/access.log combined

VirtualHost

Restart HTTPD and test out your new site!

Visit our Air BnB in Terlingua!

We love to visit the West Texas Desert and stay with our friends in Terlingua, Texas at The Terlingua Ghostown Rentals. Right at the entrance to the Ghosttown, you’ll see https://terlinguaghosttownrentals.com/ — the staff is friendly and you’ll be close to everything the desert has to offer!

A Quick History of Terlingua

Terlingua’s name is thought to come from the Spanish phrase for “three tongues,” a nod to the mix of Native American, Spanish, and English speakers who once passed through the area. The settlement got its start as a small village along Terlingua Creek, but everything changed in the 1880s when prospectors discovered cinnabar, the mineral used to produce mercury (also known as quicksilver).

Chicago businessman Howard Perry recognized the value of the deposits and founded the Chisos Mining Company in 1903, turning Terlingua into the largest mercury-producing district in Texas. At its peak, the town supported a population in the thousands, complete with a company store, a school, and the Terlingua Cemetery that still draws visitors today. But mercury demand faded after World War II, the mine went bankrupt, and by the late 1940s most residents had moved on, leaving the town to earn its “ghost town” name.

Terlingua didn’t stay quiet forever. Starting in the 1960s and 70s, river guides, artists, and other desert-loving transplants began moving into the old ruins, restoring buildings and breathing new life into the community. Today it’s a small, tight-knit outpost known for its chili cook-offs, star parties, and a laid-back frontier spirit that still echoes its mining-camp roots.

Big Bend National Park, Just Down the Road

Terlingua sits right at the doorstep of Big Bend National Park, one of the most remote and least-visited parks in the country — and that’s part of the appeal. Established in 1944, Big Bend was the first national park in Texas and remains the only one in the country to contain an entire mountain range within its boundaries, the Chisos Mountains.

The park spans over 800,000 acres of Chihuahuan Desert along the Rio Grande, which forms the border with Mexico and has carved dramatic canyons like Santa Elena, Mariscal, and Boquillas over millions of years. Elevations swing from around 1,850 feet near the river up to over 7,800 feet at Emory Peak, which makes for wildly different landscapes and temperatures depending on where you’re standing. It’s also one of the best places in the country for stargazing, thanks to an International Dark Sky designation and some of the darkest night skies left in the lower 48.

Whether you’re here for the mining history, the hiking and canyons, or just the quiet of the desert at night, staying in Terlingua puts you close to all of it. Come visit us at Terlingua Ghostown Rentals!