Re: mod_lua and subprocess_env

[Andrei Ivanov <andrei.ivanov@xxxxxxxxx>]

On Tue, Feb 28, 2017 at 12:09 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:

On Mon, Feb 27, 2017 at 11:58 AM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:

On Fri, Feb 24, 2017 at 10:58 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:

On Feb 24, 2017 22:54, "Yann Ylavic" <ylavic.dev@xxxxxxxxx> wrote:

On Fri, Feb 24, 2017 at 6:50 PM, Andrei Ivanov <andrei.ivanov@xxxxxxxxx> wrote:
>
> I've managed to apply your patch and rebuild Apache and now I have:
> Header set Client-IP "expr=%{REMOTE_ADDR}"
> Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}"
> Header set Client-DN "expr=%{SSL_CLIENT_S_DN}"

Could you please add:
  Header set Expr "'IP Address:'.%{REMOTE_ADDR} -in PeerExtList('2.5.29.17')"
?

If it outputed "Expr: IP Addressfalse" that'd be issue with operators'
precedence.
I'll try on my side, but you may beat me to it since you have the environment...

Ugh, it's my work environment, I'll be able to access it only on Monday. 

Tried now, I've adapted your suggestion a bit as it doesn't seem correct:

Header set Expr "expr='IP Address:'.%{REMOTE_ADDR} -in %{PeerExtList:2.5.29.17}"

This results in:
Expr: 'IP Address:'.159.107.78.127 -in email:<redacted1>, email:<redacted2>, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1, IP Address:159.107.78.127, IP Address:FE80:0:0:0:6D03:4CE1:C15F:5A44

As far as I understand, it doesn't perform the concatenation properly.

I've tried
Header set Expr "expr='%{IP Address:'.%{REMOTE_ADDR}} -in %{PeerExtList:2.5.29.17}"

But I get a parse error at startup:
Can't parse value _expression_ : syntax error, unexpected T_ERROR, expecting T_VAR_END or ':': Invalid character in variable name ' '

But I think mod_headers has some different way of interpreting expressions, because this doesn't work:

Header set matched false
<If "'IP Address:'.%{REMOTE_ADDR} -in %{PeerExtList:2.5.29.17}">
    Header set matched true
</If>

Cannot parse condition clause: syntax error, unexpected T_VAR_BEGIN, expecting T_ID or '{

Yann? Any clues? :-)

Ping 😐