On Tue, Feb 14, 2017 at 1:24 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:
>
> I'm using mod_nss exactly because mod_ssl doesn't expose that variable and
> my issue that requests that is sitting ignored for 2 months now :-(
Did you try something with SSLRequire or a <if> expression like
"'<myip>' -in PeerExtList('2.5.29.17')" ?
I never tested it, but since '2.5.29.17' is the OID for the
certificate's SAN, and PeerExtList() may return the list of the inner
strings, it could possibly work...
Regards,
Yann.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|