Re: mod_lua and subprocess_env

[Andrei Ivanov <andrei.ivanov@xxxxxxxxx>]

On Wed, Feb 22, 2017 at 3:36 PM, Yann Ylavic <ylavic.dev@xxxxxxxxx> wrote:

On Wed, Feb 22, 2017 at 11:19 AM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:
> On Wed, Feb 22, 2017 at 12:02 PM, Yann Ylavic <ylavic.dev@xxxxxxxxx> wrote:
>>
>> On Wed, Feb 22, 2017 at 10:58 AM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx>
>> wrote:
>> >
>> > So... do I have a chance to get it running on RHEL 7.3 which ships with
>> > 2.4.6?
>>
>> That may work in 2.4.6, I just didn't try ;)
>> "Require expr ... -in" exists (as far as I can tell), and so is
>> PeerExtList I think.
>> Did you try it?
>
>
> I didn't try on 2.4.6 because it fails even on 2.4.25:
> <Location />
>     Require expr "('IP Address:' . %{REMOTE_ADDR}) -in
> PeerExtList('2.5.29.17')"
> </Location>
>
> Cannot parse _expression_ in require line: syntax error, unexpected ')'

My bad, please try without the parentheses:

    Require expr "'IP Address:' . %{REMOTE_ADDR} -in PeerExtList('2.5.29.17')

Did that too, Apache starts but the _expression_ always returns false :-(

And I can't find a way to debug it, to see what PeerExtList('2.5.29.17') returns for my client certificate.