Re: Allow SSLProxy* config in context?

2016-04-15 Thread Rainer Jung
Am 15.04.2016 um 13:30 schrieb Yann Ylavic: On Thu, Apr 14, 2016 at 9:57 AM, Yann Ylavic wrote: IIUC, the block is a per_dir context already, which can/could accept any directive provided their ap_check_cmd_context() allows it (we may need to declare a new PROXY_CONF). So how about making pe

Re: Allow SSLProxy* config in context?

2016-04-15 Thread Yann Ylavic
On Thu, Apr 14, 2016 at 9:57 AM, Yann Ylavic wrote: > > IIUC, the block is a per_dir context already, which can/could > accept any directive provided their ap_check_cmd_context() allows it > (we may need to declare a new PROXY_CONF). > > So how about making per_dir SSLProxy* directives, restricte

Re: Allow SSLProxy* config in context?

2016-04-15 Thread Rainer Jung
Am 15.04.2016 um 03:20 schrieb Daniel Ruggeri: On 4/14/2016 3:08 AM, Rainer Jung wrote: Your idea to allow selecting a client cert based on CN or DN sounds attractive to me as well. But since it wouldn't help with other per backend settings (like different Verify settings) we might even think a