Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Pavel Matěja
Dne Čt 20. února 2014 08:13:13, Eric Covener napsal(a): > On Thu, Feb 20, 2014 at 7:47 AM, Pavel Matěja wrote: > > Dne St 19. února 2014 21:09:10, William A. Rowe Jr. napsal(a): > >> I believe that Kaspar and Ruediger are still entirely at odds with my > >> position, but this 'enhancement' should

Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Yann Ylavic
mod_ssl won't fill in the SNI if it's an IP address, the check is not in mod_proxy_http but in ssl_io_filter_connect() : if (hostname_note && sc->proxy->protocol != SSL_PROTOCOL_SSLV2 && sc->proxy->protocol != SSL_PROTOCOL_SSLV3 && apr_ipsubnet_create(&ip

Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Eric Covener
>> Please post the full details in a bug report > It's qute simple. I meant the full details (config, logs, etc) in bugzilla. https://issues.apache.org/bugzilla/

Re: Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Pavel Matěja
Dne Čt 20. února 2014 15:00:05, Yann Ylavic napsal(a): > mod_ssl won't fill in the SNI if it's an IP address, the check is not > in mod_proxy_http but in ssl_io_filter_connect() : > if (hostname_note && > sc->proxy->protocol != SSL_PROTOCOL_SSLV2 && > sc->proxy->prot