On Wed, Feb 22, 2017 at 3:19 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:
> On Wed, Feb 22, 2017 at 3:36 PM, Yann Ylavic <ylavic.dev@xxxxxxxxx> wrote:
>>
>> My bad, please try without the parentheses:
>>
>> Require expr "'IP Address:' . %{REMOTE_ADDR} -in
>> PeerExtList('2.5.29.17')
>
> Did that too, Apache starts but the expression always returns false :-(
>
> And I can't find a way to debug it, to see what PeerExtList('2.5.29.17')
> returns for my client certificate.
My proposed patch (to be applied to 2.4.25) and:
Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}"
does it.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|