mod_cluster SSL configuration for httpd balancer and AS7 worker

mod_cluster.conf

# mod_proxy_balancer should be disabled when mod_cluster is used
LoadModule proxy_cluster_module modules/mod_proxy_cluster.so
LoadModule slotmem_module modules/mod_slotmem.so
LoadModule manager_module modules/mod_manager.so
LoadModule advertise_module modules/mod_advertise.so

MemManagerFile /home/karm/test/cache/mod_cluster
ServerName hellbox:8888
<IfModule manager_module>
  Listen hellbox:8888
  <VirtualHost hellbox:8888>
    <Directory />
      Order deny,allow
      Deny from all
      # Debug only :-)
      Allow from all
    </Directory>
    ServerAdvertise on
    EnableMCPMReceive
    <Location /mcm>
      SetHandler mod_cluster-manager
      Order deny,allow
      Deny from all
      # Debug only :-)
      Allow from all
   </Location>
        
    SSLEngine on
    LogLevel debug
    SSLCipherSuite AES128-SHA:ALL:!ADH:!LOW:!MD5:!SSLV2:!NULL
    SSLVerifyDepth 10
    SSLProxyEngine On
    SSLCertificateKeyFile /home/karm/test/certs/server.key
    SSLCertificateFile /home/karm/test/certs/server.crt
    SSLCACertificateFile /home/karm/test/certs/myca.crt
  </VirtualHost>
</IfModule>

standalone-ha.xml

+++
  </extensions>
  <system-properties>
    <property name="javax.net.ssl.trustStore" value="/home/karm/test/certs/client-cert-key.jks" />
    <property name="javax.net.ssl.trustStorePassword" value="tomcat" />
  </system-properties>
  <management>
+++
<subsystem xmlns="urn:jboss:domain:web:1.4" default-virtual-server="default-host" native="false">
  <connector name="https" protocol="HTTP/1.1" socket-binding="https" scheme="https" secure="true">
    <ssl name="https" ca-certificate-file="/home/karm/test/certs/ca-cert.jks"
                      certificate-key-file="/home/karm/test/certs/client-cert-key.jks" 
                      certificate-file="/home/karm/test/certs/client-cert-key.jks"
                      password="tomcat"  
                      verify-client="false" 
                      key-alias="javaclient" 
                      cipher-suite="AES128-SHA:ALL:!ADH:!LOW:!MD5:!SSLV2:!NULL" 
                      protocol="TLS" />
  </connector>
  <virtual-server name="default-host" enable-welcome-root="true">
    <alias name="localhost"/>
    <alias name="example.com"/>
  </virtual-server>
</subsystem>
+++
<subsystem xmlns="urn:jboss:domain:modcluster:1.1">
  <mod-cluster-config advertise-socket="modcluster" advertise="true"
                      sticky-session="true" sticky-session-force="false" sticky-session-remove="false" connector="https">
    <ssl ca-certificate-file="/home/karm/test/certs/ca-cert.jks"
         certificate-key-file="/home/karm/test/certs/client-cert-key.jks"
        password="tomcat"
        key-alias="javaclient"
        cipher-suite="AES128-SHA:ALL:!ADH:!LOW:!MD5:!SSLV2:!NULL" protocol="TLS"/>
    <dynamic-load-provider decay="2" history="10">
      <load-metric weight="1" type="busyness"/>
    </dynamic-load-provider>
  </mod-cluster-config>
</subsystem>
+++

This is very good info... but what if we have Apache/Mod cluster on one machine and Tomcat 7 on second machine, how would we achieve the secure connection