Apache + AutoIt = HTTPS API on AutoIt

[argumentum]

I can TCP/IP in AutoIt, hence, make a HTTP deamon. Now, how can I HTTPS to use SSL !??
Well, Apache has this "mod_proxy.so" module that can let me have SSL and what not is in Apache.
All that is needed is to tell Apache what I wanna do by editing httpd.conf .

# Implements a proxy/gateway for Apache.
# 1. Open /Applications/XAMPP/etc/httpd.conf
# 2. Enable the following Modules by removing the # at the front of the line.
#  - LoadModule rewrite_module modules/mod_rewrite.so
#  - LoadModule proxy_module modules/mod_proxy.so
#  - LoadModule proxy_http_module modules/mod_proxy_http.so
#
# 3. Copy and Paste below to the bottom of httpd.conf
#
<IfModule mod_proxy.c>
  ProxyRequests On
  <Proxy *>
      Order deny,allow
      Allow from all
  </Proxy>
  ProxyVia Off
  ProxyPreserveHost Off
  ProxyPass /home/ http://127.0.0.1:84/home/
  ProxyPassReverse /home/ http://127.0.0.1:84/home/

  SetEnv proxy-nokeepalive 1
  # ..since we are not using "keep-alive", we are using "close"

</IfModule>

...et voila  

I'm using XAMPP ( https://www.apachefriends.org/download.html )
and this is my solution to avoid coding in PHP, as I feel more comfortable coding in AutoIt.
A "muli-thread or concurrency" can be done by forking the socket ( https://www.autoitscript.com/forum/topic/199177-fork-udf-ish/ )
but responses are under 20 ms., so I feel fine with a single thread.

I modified an example ( attached below ), so can try out the concept.

PS: I am not an Apache guru. I just discovered this and it opens a world of possibilities. In my case, I'm thinking of an API to query SQLite 

PS2: I'm not gonna make Poll but do click like if you do  

 

201673-json-http-post-serverlistener.au3

[robertocm]

Just a reference:

https://www.stunnel.org/

Stunnel is a proxy designed to add TLS encryption functionality to existing clients and servers without any changes in the programs' code. Its architecture is optimized for security, portability, and scalability (including load-balancing), making it suitable for large deployments.

Cited here:

https://www.autoitscript.com/forum/topic/21889-ssl-gmail-with-openssl/?do=findComment&comment=1035990

[Skysnake]

This grabbed me. But I am a bit lost as to what is happening here. Would you please be so kind as to explain a little more? Not code, but rather why this would be useful?

On 2/29/2020 at 11:25 PM, argumentum said:

and this is my solution to avoid coding in PHP, as I feel more comfortable coding in AutoIt.

Do you run AutoIt on a Linux box, with Apache, but instead of PHP, AutoIt? Please enlighten me?

[argumentum]

You can run Apache from a distro in windows. I can redirect within Apache from another HTTP daemon ( made with AutoIt in my case ) in another port, or use PHP and an AutoIt CUI as CGI.
No need to run a specific OS to do HTTP/HTTPS, you can do it from the comfort of the known world.

The best you can do is to load a virtual machine and play with it.

Oh, another thing. You can, as I have ( and currently do ), run XAMPP open to the world. It is not necessarily for development only.
PS: But you'll want change some stuff to have attackers ( and they will come ) not have their way with their cookie cutter style attacks.
You should search online for advise on different approaches to be aware of.

Edited December 15, 2022 by argumentum