Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-05-03 Thread Tom Evans
On Mon, Apr 30, 2012 at 8:15 AM, Plüm, Rüdiger, Vodafone Group wrote: >> -Original Message- >> From: Kaspar Brand [mailto:httpd-dev.2...@velox.ch] >> Sent: Sonntag, 29. April 2012 09:59 >> To: dev@httpd.apache.org >> Subject: Re: [users@httpd] SNI w

RE: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-30 Thread Plüm , Rüdiger , Vodafone Group
> -Original Message- > From: Kaspar Brand [mailto:httpd-dev.2...@velox.ch] > Sent: Sonntag, 29. April 2012 09:59 > To: dev@httpd.apache.org > Subject: Re: [users@httpd] SNI with apache 2.4.1 reverse proxy > > Whether that is desired or not probably depends on a ju

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-29 Thread Kaspar Brand
On 23.04.2012 17:11, Michael Weiser wrote: > I don't think so: I'm not directing the Proxy to connect to a different > host. I just make it send different SNI data to the configured backend > server and accept a different CN in the server's certificate. I guess it boils down to the question of wha

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-23 Thread Michael Weiser
Hello Karspar, Hi all, On Wed, Apr 18, 2012 at 10:16:51AM +0200, Kaspar Brand wrote: > > So implementation-wise this will most likely have two parts of code: > > > > 1. Determining the hostname to put into SNI data depending on > > ProxyPreserveHost somewhere in the reverse proxy module. > > >

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-18 Thread Kaspar Brand
On 16.04.2012 16:47, Michael Weiser wrote: > So implementation-wise this will most likely have two parts of code: > > 1. Determining the hostname to put into SNI data depending on > ProxyPreserveHost somewhere in the reverse proxy module. > > 2. Putting that value into the SNI data in mod_ssl's

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-16 Thread Michael Weiser
Hi Tom, On Mon, Apr 16, 2012 at 04:02:00PM +0100, Tom Evans wrote: > > This could be a side-effect of ProxyPreserveHost On since only with > > ProxyPreserveHost On does it make any sense anyways. With > > ProxyPreserveHost Off, the SNI data should contain the hostname from the > > ProxyPassRevers

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-16 Thread Tom Evans
On Mon, Apr 16, 2012 at 3:47 PM, Michael Weiser wrote: > Hi there, > > On Mon, Apr 16, 2012 at 01:45:16PM +0200, Peter Sylvester wrote: > >> >> that makes mod_ssl put the content of the host header into the sni data >> >> structures instead of the hostname from the URL used in the >> >> ProxyPass(

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-16 Thread Michael Weiser
Hi there, On Mon, Apr 16, 2012 at 01:45:16PM +0200, Peter Sylvester wrote: > >> that makes mod_ssl put the content of the host header into the sni data > >> structures instead of the hostname from the URL used in the > >> ProxyPass(Reverse) configuration itself. This way even name-based > >> virt

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-16 Thread Peter Sylvester
On 04/16/2012 12:45 PM, Michael Weiser wrote: that makes mod_ssl put the content of the host header into the sni data structures instead of the hostname from the URL used in the ProxyPass(Reverse) configuration itself. This way even name-based virtual hosts should work behind the reverse proxy.

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-16 Thread Michael Weiser
Hi, On Tue, Apr 10, 2012 at 10:01:11AM +0200, Michael Weiser wrote: > A solution might be something like: > ProxyPass / https://www.example.com:12443/ no-sni > ProxyPassReverse / https://www.example.com:12443/ no-sni > , disabling SNI towards the backend server. > Or can I tell the 2.2.14 apac

Re: Scope of ProxyPreserveHost (was: Re: [users@httpd] SNI with apache 2.4.1 reverse proxy)

2012-04-10 Thread Tom Evans
On Tue, Apr 10, 2012 at 1:38 AM, Jie Gao wrote: > Hi All > > Would it be possible to expand the scope of ProxyPreserveHost to "Location"? > > Regards, > > > Jie > I don't understand; ProxyPreserveHost affects the proxying apache server, and controls whether it rewrites the 'Host' header in the re

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-10 Thread Michael Weiser
Hi Igor, Hi Daniel, On Mon, Apr 09, 2012 at 08:56:12AM -, Igor Gali? wrote: > > Then it looks like mod_proxy_http determines the value for > > "proxy-request-hostname" from the remote URL in ProxyPass, but is > > passing on the Host header from the original request. > That would imply ProxyPr

Scope of ProxyPreserveHost (was: Re: [users@httpd] SNI with apache 2.4.1 reverse proxy)

2012-04-09 Thread Jie Gao
Hi All Would it be possible to expand the scope of ProxyPreserveHost to "Location"? Regards, Jie * Igor Gali?? wrote: > Date: Mon, 9 Apr 2012 08:56:12 + > From: Igor Gali?? > To: dev@httpd.apache.org > CC: Michael Weiser > Subject: Re: [users@httpd] SNI with a

Re: [users@httpd] SNI with apache 2.4.1 reverse proxy

2012-04-09 Thread Igor Galić
- Original Message - > On 07.04.2012 00:34, Daniel Ruggeri wrote: > > I wanted to bring this up here - seems like a few things are going > > on > > that are confusing to me. I'll try to look into it when time > > becomes > > available, but I thought someone might have an opinion off the b