I'm using Apache 1.3.14 with modssl 2.7.1, and I'm having problems with URL
based look ahead in a rewrite condition.
We have a custom HTTP header set in our authentication process. If it is
empty, I need to redirect the user to a specific page. To do this, I use a
rewrite condition like the following:
RewriteCond %{LA-U:HTTP:CUSTOMHEADER} ^$
This works, but it is causing some problems. Without the look ahead
condition, everything is okay, but with it I get some weird headers set.
Here they are from /cgi-bin/printenv (I apologize if my mailer decides to
wrap them):
HTTP_TFNBWLIWPWZQETOXF4_______END_CERTIFICATE______="Root"
HTTP_YYE9SS8L9QHWVJOJCTHUGQUV9DYU5G2TYSWFKY8FAVZT_E4FH4YQFGXWFL_C3_KWTFNBWLI
WPWZQETOXF4_______END_CERTIFICATE______="a22cbee4-3e29-3ad85eaf-5784-60712ab
5"
HTTP__END_CERTIFICATE______="06-3aad364a-9639-001c-0000-065a0000065a"
It looks like they are getting set for some reason from the SSL_SERVER_CERT:
SSL_SERVER_CERT="-----BEGIN
CERTIFICATE-----\nMIIC3TCCAkagAwIBAgIBBDANBgkqhkiG9w0BAQQFADBGMQswCQYDVQQGEw
JVUzEZ\nMBcGA1UEChMQbmllbHNlbm1lZGlhLmNvbTEcMBoGA1UEAxMTQ2VydGlmaWNhdGUg\nTW
FuYWdlcjAeFw0wMTAzMjIxNzA2MjNaFw0wMjAzMjIxNzA2MjNaMIGYMQswCQYD\nVQQGEwJVUzEQ
MA4GA1UECBMHRmxvcmlkYTEQMA4GA1UEBxMHRHVuZWRpbjEfMB0G\nA1UEChMWTmllbHNlbiBNZW
RpYSBSZXNlYXJjaDEaMBgGA1UEAxMRd3d3LnR2cmF0\naW5ncy5jb20xKDAmBgkqhkiG9w0BCQEW
GXdlYnNlcnZpY2VzQHR2cmF0aW5ncy5j\nb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAM
tzT4eNnfRc6Z51m8eiSaZ4
\n6luilEND9B42+Y+VWgk8mx4c30569GfIuDoKlTQOXWJoJDJcWJORTGexOJ6DIxPu\n/DwDBWDt
oriZ38/k2fRUIVr+aWzA6s0mO+vr+y21MYGNbit+HPfbsqdKCh9pqGOe\nnqs2sjnXHqxcG3b6Qn
8vAgMBAAGjgYcwgYQwEQYJYIZIAYb4QgEBBAQDAgZAMA4G\nA1UdDwEB/wQEAwIE8DAdBgNVHQ4E
FgQUDmnZVhAdF6+C0jC3qexzI7JSQwkwHwYD\nVR0jBBgwFoAUwbMlAViW9qT3jo/GFFpFtAOE4G
UwHwYDVR0RBBgwFoEUbWp3QG5p\nZWxzZW5tZWRpYS5jb20wDQYJKoZIhvcNAQEEBQADgYEAry3p
DDSqAGf1/DMWGCT1\nhPWHvnF62WaCR0FrbdJNhRAVd30MTfNqARYunpZpybbjCQgvjNh6VVsDDy
hKY1VF\n1VZEEmYYE9sS8L9QhWvJoJCtHugqUv9DYU5G2tySWfkY8FavZt+e4FH4yQfgXWfl
\nC3/kwtfNbWLiWpWzqetoxF4=\n-----END CERTIFICATE-----\n"
This some of our applications really don't like these headers. Is there
anything I can do to get rid of them?
Thanks
Mike
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
