On Feb 24, 2017 22:54, "Yann Ylavic" <ylavic.dev@xxxxxxxxx> wrote:On Fri, Feb 24, 2017 at 6:50 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:Could you please add:
>
> I've managed to apply your patch and rebuild Apache and now I have:
> Header set Client-IP "expr=%{REMOTE_ADDR}"
> Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}"
> Header set Client-DN "expr=%{SSL_CLIENT_S_DN}"
Header set Expr "'IP Address:'.%{REMOTE_ADDR} -in PeerExtList('2.5.29.17')"
?
If it outputed "Expr: IP Addressfalse" that'd be issue with operators'
precedence.
I'll try on my side, but you may beat me to it since you have the environment...Ugh, it's my work environment, I'll be able to access it only on Monday.