On Wed, Feb 22, 2017 at 1:09 AM, Yann Ylavic <ylavic.dev@xxxxxxxxx> wrote: > On Tue, Feb 21, 2017 at 5:43 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote: >> On Tue, Feb 21, 2017 at 6:32 PM, Yann Ylavic <ylavic.dev@xxxxxxxxx> wrote: >>> >>> On Tue, Feb 21, 2017 at 4:50 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> >>> wrote: >>> >>> >>> >>> Header set Client-SAN "%{PeerExtList('2.5.29.17')}s" >>> >>> The syntax may be rather: >>> >>> Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}" >>> >>> Does it work better? >> >> >> Uf, no :-( > > I've got it to work in (in 2.4.25), with a patch (attached), and for > me it outputs: > Client-SAN: DNS:www1.domain.tld, DNS:www2.domain.tld, > DNS:www3.domain.tld, IP Address:192.168.150.80, IP > Address:192.168.150.145, IP Address:172.25.25.100 > > So I guess something like: > Require expr "('IP Address:' . %{REMOTE_ADDR}) -in PeerExtList('2.5.29.17')" > should work (at least with 2.4.5). I meant 2.4.25 here... > > > Regards, > Yann. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx