Re: [users@httpd] Logging SSL Handshake Duration

2017-11-15 Thread Osama Elnaggar
Hi Timo, >From what you described, your problem may be related to OCSP. Have you tried OCSP stapling? -- Osama Elnaggar On November 15, 2017 at 9:26:29 PM, Timo Coutura ( timo.cout...@cologne-intelligence.de) wrote: Hi Everyone, I am looking for a way to determine the time spent on a SSL

Re: [users@httpd] extract auth header from query string

2017-11-15 Thread Daniel
iirc httpd does not deal with wss as of now, only for reverse proxying. 2017-11-15 19:27 GMT+01:00 Mark Lybarger : > i have a user who is connecting to a websocket that requires a basic > authenticaion header. they're doing this from the browser's javascript as > >

[users@httpd] extract auth header from query string

2017-11-15 Thread Mark Lybarger
i have a user who is connecting to a websocket that requires a basic authenticaion header. they're doing this from the browser's javascript as wss://user:p...@myhost.com/endpoint that's not supported in all browsers (Safari on iphone). as a workaround, perhaps they can use:

[users@httpd] Logging SSL Handshake Duration

2017-11-15 Thread Timo Coutura
Hi Everyone, I am looking for a way to determine the time spent on a SSL Handshake in an access log. So far i’ve discovered only env-vars and log formats (like %D) returning the overall time spent on a request. The background here is that i sometimes get requests which take up to 10 seconds,