I have done such a setup.  The effort isn't in getting PLT to work, rather it's in getting mod_proxy to work correctly. You likely need to do some URL munging, and for that you'll also need mod_proxy_html. <ul><li><a href="http://schemecookbook.org/Cookbook/HttpsWebservering">A tutorial on using Apache+SSL as PLT Frontend</a></li><li><a href="http://apache.webthing.com/mod_proxy_html/">mod_proxy_html</a> - Home to <code>mod_proxy_html</code> that can be used for in page link translation </li><li><a href="http://www.apachetutor.org/admin/reverseproxies">Reverse Proxy Tutorial</a> - An older tutorial on how to setup <code>mod_proxy</code> as a reverse proxy</li><li><a href="http://httpd.apache.org/docs/2.1/mod/mod_proxy.html#proxypassreversecookiedomain">ProxyPassReverseCookieDomain</a> - The directive to ensure cookie also works across proxy calls </li><li><a href="http://www.excalibur-partners.com/archives/6">Installing mod_proxy_html</a></li></ul>Also read up about selinux to ensure that your apache server can access network... Cheers, <div class="gmail_quote"> On Wed, Oct 22, 2008 at 4:02 PM, Marek Kubica <<a href="mailto:marek@xivilization.net">marek@xivilization.net</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div class="Ih2E3d">On Thu, 23 Oct 2008 00:56:07 +0200 Marek Kubica <<a href="mailto:marek@xivilization.net">marek@xivilization.net</a>> wrote: > I'm planning to write an application using the PLT web server, that > will be run behind an Apache server which takes care about SSL client > certificate authentifaction and puts the user name into the > REMOTE_USER variable. </div>I picture says more then a hundred words. Even if it's ASCII. User's browser (with a client certificate and uername bob) | | v Apache (gets the HTTPS request) | | v mod_ssl (verifies the certificate against the CA, sets REMOTE_USER to bob) | | v mod_headers (sets some HTTP request header to the value of REMOTE_USER) | | v mod_proxy (forwards the modified request via HTTP internally) | | v PLT web server (accesses the user name from the header and runs app) My question is whether the PLT web server can handle something like this. <div><div></div><div class="Wj3C7c"> regards, Marek _________________________________________________  For list-related administrative tasks:  <a href="http://list.cs.brown.edu/mailman/listinfo/plt-scheme" target="_blank">http://list.cs.brown.edu/mailman/listinfo/plt-scheme</a> </div></div></blockquote></div>