Re: [users@httpd] mod_lua and subprocess_env

Yann? Any chance to get this reviewed after the 2.4.32 release? On Tue, Jan 2, 2018 at 7:08 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Hello? Yann? > > On Thu, Dec 21, 2017 at 5:39 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> Yann? Are

Re: [users@httpd] mod_lua and subprocess_env

Hello? Yann? On Thu, Dec 21, 2017 at 5:39 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Yann? Are you there?  > > On Mon, Dec 4, 2017 at 3:43 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> Hi Yann, >> Any news on the reviews? >> >

Re: [users@httpd] mod_lua and subprocess_env

Yann? Are you there?  On Mon, Dec 4, 2017 at 3:43 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Hi Yann, > Any news on the reviews? > > On Tue, Oct 3, 2017 at 9:58 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> Woohoo! >> >>

Re: [users@httpd] mod_lua and subprocess_env

Hi Yann, Any news on the reviews? On Tue, Oct 3, 2017 at 9:58 AM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Woohoo! > > Thank you ☺ > > On Tue, Oct 3, 2017 at 1:44 AM, Yann Ylavic <ylavic@gmail.com> wrote: > >> Hi Andrei, >> >> Co

Re: [users@httpd] mod_lua and subprocess_env

Woohoo! Thank you ☺ On Tue, Oct 3, 2017 at 1:44 AM, Yann Ylavic <ylavic@gmail.com> wrote: > Hi Andrei, > > Committed to trunk (http://svn.apache.org/r1810605), should have a better > visibility (and review) now. > > Regards, > Yann. > > > On Sun, Se

Re: [users@httpd] mod_lua and subprocess_env

Ok, I understand. Thank you very much  On Sun, Sep 17, 2017 at 7:14 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Sun, Sep 10, 2017 at 12:46 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > Yann? > > What's the next step? Your message didn't seem t

Re: [users@httpd] mod_lua and subprocess_env

Yann? Are you there?  On Sun, Sep 10, 2017 at 1:46 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Yann? > What's the next step? Your message didn't seem to draw attention from > others and it's been almost 2 months  > > On Mon, Aug 7, 2017 at 3:30 PM, Andr

Re: [users@httpd] mod_lua and subprocess_env

Yann? What's the next step? Your message didn't seem to draw attention from others and it's been almost 2 months  On Mon, Aug 7, 2017 at 3:30 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Hmm, if nobody comments on your proposal does it mean you get an implicit > commit acce

Re: [users@httpd] mod_lua and subprocess_env

Hmm, if nobody comments on your proposal does it mean you get an implicit commit acceptance after 1 month?  On Sat, Jul 15, 2017 at 7:35 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > This is great news, thank you very much. > > So far I am monitoring the list archives thro

Re: [users@httpd] mod_lua and subprocess_env

This is great news, thank you very much. So far I am monitoring the list archives through http://mail-archives.apache.org/mod_mbox/httpd-dev/201707.mbox/browser :) On Sat, Jul 15, 2017 at 1:01 AM, Yann Ylavic <ylavic@gmail.com> wrote: > Hi Andrei, > > On Thu, Jul 13, 2017 at

Re: [users@httpd] mod_lua and subprocess_env

Yann? Is it a good time now?  On Tue, Jun 20, 2017 at 6:41 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Hi, > Seeing that 2.4.26 was released, is this a good time?  > > Thanks again. > > On Sun, May 28, 2017 at 11:54 PM, Yann Ylavic <ylavic@gmail.c

Re: [users@httpd] 'require' directive result

On Wed, Jun 21, 2017 at 6:24 PM, Luca Toscano <toscano.l...@gmail.com> wrote: > Hi Andrei, > > 2017-06-16 15:23 GMT+02:00 Andrei Ivanov <andrei.iva...@gmail.com>: > >> Hi, >> Now that I've managed to configure my 'require' directive, I have a >> require

Re: [users@httpd] mod_lua and subprocess_env

; <http://www.gettyimages.com/search/photographer?family=creative=1=mitchell%20krog=best=true#license> > > or From Gallo Images Here > <http://galloimages.co.za/Search?q=mitchell%20krog=1=1=2,1=2=on=1=48034=13=6> > *****

Re: [users@httpd] mod_lua and subprocess_env

Hi, Seeing that 2.4.26 was released, is this a good time?  Thanks again. On Sun, May 28, 2017 at 11:54 PM, Yann Ylavic <ylavic@gmail.com> wrote: > Hi Andrei, > > On Wed, May 24, 2017 at 5:50 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > > > D

[users@httpd] Re: 'require' directive result

Anybody? Can this be done in some way? On Fri, Jun 16, 2017 at 4:23 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Hi, > Now that I've managed to configure my 'require' directive, I have a > requirement to log some details to syslog in case the request is n

[users@httpd] 'require' directive result

Hi, Now that I've managed to configure my 'require' directive, I have a requirement to log some details to syslog in case the request is not authorized. Require expr "" // if expression is false, log details about the request and maybe the SSL certificate to syslog I've searched

Re: [users@httpd] mod_lua and subprocess_env

On Sun, May 28, 2017 at 11:54 PM, Yann Ylavic <ylavic@gmail.com> wrote: > Hi Andrei, > > On Wed, May 24, 2017 at 5:50 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > > > Does anybody know anything about Yann? > > I do :) > > S

Re: [users@httpd] mod_lua and subprocess_env

Does anybody know anything about Yann? 樂 On Thu, Apr 27, 2017 at 3:47 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Yann?  > > > On Wed, Apr 19, 2017 at 11:49 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Apr 10, 2017 12:10 PM, &quo

Re: [users@httpd] mod_lua and subprocess_env

Yann?  On Wed, Apr 19, 2017 at 11:49 AM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Apr 10, 2017 12:10 PM, "Andrei Ivanov" <andrei.iva...@gmail.com> wrote: > > On Tue, Apr 4, 2017 at 4:25 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: >

Re: [users@httpd] mod_lua and subprocess_env

On Apr 10, 2017 12:10 PM, "Andrei Ivanov" <andrei.iva...@gmail.com> wrote: On Tue, Apr 4, 2017 at 4:25 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Wed, Mar 29, 2017 at 12:16 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Apr 4, 2017 at 4:25 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Wed, Mar 29, 2017 at 12:16 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Thu, Mar 23, 2017 at 3:52 PM, Andrei Ivanov <andrei.iva...@gmail.com> >> wrote: >&

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Mar 29, 2017 at 12:16 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Thu, Mar 23, 2017 at 3:52 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Wed, Mar 22, 2017 at 5:08 PM, Yann Ylavic <ylavic@gmail.com> >> wrote: >>

Re: [users@httpd] mod_lua and subprocess_env

On Thu, Mar 23, 2017 at 3:52 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Wed, Mar 22, 2017 at 5:08 PM, Yann Ylavic <ylavic@gmail.com> wrote: > >> On Wed, Mar 22, 2017 at 3:45 PM, Andrei Ivanov <andrei.iva...@gmail.com> >> wrote: >> > O

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Mar 22, 2017 at 5:08 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Wed, Mar 22, 2017 at 3:45 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > On Wed, Mar 22, 2017 at 3:53 PM, Andrei Ivanov <andrei.iva...@gmail.com> > > wrote: > > &

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Mar 22, 2017 at 3:53 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Wed, Mar 22, 2017 at 3:27 PM, Yann Ylavic <ylavic@gmail.com> wrote: > >> On Wed, Mar 22, 2017 at 1:37 PM, Yann Ylavic <ylavic@gmail.com> >> wrote: >>

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Mar 22, 2017 at 3:27 PM, Yann Ylavic wrote: > On Wed, Mar 22, 2017 at 1:37 PM, Yann Ylavic wrote: > > > > There are two patches attached, one for the changes in httpd code, the > > other for the files generated by the bison/flex parser. > >

Re: [users@httpd] mod_lua and subprocess_env

On Mon, Mar 13, 2017 at 4:16 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Fri, Mar 10, 2017 at 12:35 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Tue, Mar 7, 2017 at 7:08 PM, Andrei Ivanov <andrei.iva...@gmail.com> >> wrote: >&

Re: [users@httpd] mod_lua and subprocess_env

On Fri, Mar 10, 2017 at 12:35 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Tue, Mar 7, 2017 at 7:08 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Mon, Mar 6, 2017 at 12:57 PM, Yann Ylavic <ylavic@gmail.com> >> wrote: >&g

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Mar 7, 2017 at 7:08 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Mon, Mar 6, 2017 at 12:57 PM, Yann Ylavic <ylavic@gmail.com> wrote: > >> Hi Andrei, >> >> On Mon, Mar 6, 2017 at 10:15 AM, Andrei Ivanov <andrei.iva...@gmail.com> >

Re: [users@httpd] mod_lua and subprocess_env

On Mon, Mar 6, 2017 at 12:57 PM, Yann Ylavic <ylavic@gmail.com> wrote: > Hi Andrei, > > On Mon, Mar 6, 2017 at 10:15 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Thu, Mar 2, 2017 at 12:40 PM, Andrei Ivanov <andrei.iva...@gmail.com> >

Re: [users@httpd] mod_lua and subprocess_env

On Thu, Mar 2, 2017 at 12:40 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Tue, Feb 28, 2017 at 12:09 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Mon, Feb 27, 2017 at 11:58 AM, Andrei Ivanov <andrei.iva...@gmail.com> >> wrote:

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Feb 28, 2017 at 12:09 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Mon, Feb 27, 2017 at 11:58 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Fri, Feb 24, 2017 at 10:58 PM, Andrei Ivanov <andrei.iva...@gmail.com> >> wrote: >

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Feb 28, 2017 at 2:02 PM, Eric Covener <cove...@gmail.com> wrote: > On Mon, Feb 27, 2017 at 4:58 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > But I think mod_headers has some different way of interpreting > expressions, > > because this

Re: [users@httpd] mod_lua and subprocess_env

On Mon, Feb 27, 2017 at 11:58 AM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Fri, Feb 24, 2017 at 10:58 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Feb 24, 2017 22:54, "Yann Ylavic" <ylavic@gmail.com> wrote: >>

Re: [users@httpd] mod_lua and subprocess_env

On Fri, Feb 24, 2017 at 10:58 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Feb 24, 2017 22:54, "Yann Ylavic" <ylavic@gmail.com> wrote: > > On Fri, Feb 24, 2017 at 6:50 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > > >

Re: [users@httpd] mod_lua and subprocess_env

On Feb 24, 2017 22:54, "Yann Ylavic" <ylavic@gmail.com> wrote: On Fri, Feb 24, 2017 at 6:50 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > > I've managed to apply your patch and rebuild Apache and now I have: > Header set Client-IP "expr=%{REMOTE_

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Feb 22, 2017 at 5:10 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Wed, Feb 22, 2017 at 3:19 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > On Wed, Feb 22, 2017 at 3:36 PM, Yann Ylavic <ylavic@gmail.com> > wrote: > >> >

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Feb 22, 2017 at 3:36 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Wed, Feb 22, 2017 at 11:19 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > On Wed, Feb 22, 2017 at 12:02 PM, Yann Ylavic <ylavic@gmail.com> > wrote: > >> >

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Feb 22, 2017 at 12:02 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Wed, Feb 22, 2017 at 10:58 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > > > So... do I have a chance to get it running on RHEL 7.3 which ships with > > 2.4.6? > >

Re: [users@httpd] mod_lua and subprocess_env

On Wed, Feb 22, 2017 at 2:13 AM, Yann Ylavic <ylavic@gmail.com> wrote: > On Wed, Feb 22, 2017 at 1:09 AM, Yann Ylavic <ylavic@gmail.com> wrote: > > On Tue, Feb 21, 2017 at 5:43 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> On Tue, Feb 2

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Feb 21, 2017 at 6:43 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Tue, Feb 21, 2017 at 6:32 PM, Yann Ylavic <ylavic@gmail.com> wrote: > >> On Tue, Feb 21, 2017 at 4:50 PM, Andrei Ivanov <andrei.iva...@gmail.com> >> wrote: >> >&

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Feb 21, 2017 at 6:32 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Tue, Feb 21, 2017 at 4:50 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >>> > >>> Header set Client-SAN "%{PeerExtList('2.5.29.17')}s" > >

Re: [users@httpd] mod_lua and subprocess_env

On Mon, Feb 20, 2017 at 11:31 AM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Fri, Feb 17, 2017 at 12:18 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > >> >> On Thu, Feb 16, 2017 at 9:26 PM, Eric Covener <cove...@gmail.com> wrote: >>

Re: [users@httpd] mod_lua and subprocess_env

On Fri, Feb 17, 2017 at 12:18 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > > On Thu, Feb 16, 2017 at 9:26 PM, Eric Covener <cove...@gmail.com> wrote: > >> On Thu, Feb 16, 2017 at 11:16 AM, Andrei Ivanov <andrei.iva...@gmail.com> >> wrote: >

Re: [users@httpd] filtering by IP SAN entries in the client certificate

On Thu, Feb 16, 2017 at 11:38 AM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > On Wed, Feb 15, 2017 at 12:46 PM, Daniel Gruno <humbed...@apache.org> > wrote: > >> On 02/15/2017 11:31 AM, Andrei Ivanov wrote: >> > Hi, >> > I have a requirement to

Re: [users@httpd] mod_lua and subprocess_env

On Thu, Feb 16, 2017 at 9:26 PM, Eric Covener <cove...@gmail.com> wrote: > On Thu, Feb 16, 2017 at 11:16 AM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > Is there a way to debug this? To print the values from the expression in > the > > logs maybe? >

Re: [users@httpd] mod_lua and subprocess_env

On Thu, Feb 16, 2017 at 5:20 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Thu, Feb 16, 2017 at 2:46 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > > > I gave it a try, but seems to reach the same limitation of the expression > > eng

Re: [users@httpd] mod_lua and subprocess_env

On Thu, Feb 16, 2017 at 2:49 PM, Yann Ylavic <ylavic@gmail.com> wrote: > On Tue, Feb 14, 2017 at 1:24 PM, Andrei Ivanov <andrei.iva...@gmail.com> > wrote: > > > > I'm using mod_nss exactly because mod_ssl doesn't expose that variable > and > > my issu

Re: [users@httpd] filtering by IP SAN entries in the client certificate

On Wed, Feb 15, 2017 at 12:46 PM, Daniel Gruno <humbed...@apache.org> wrote: > On 02/15/2017 11:31 AM, Andrei Ivanov wrote: > > Hi, > > I have a requirement to check incoming requests, something that would be > > succinctly expressed this way: > > > &g

[users@httpd] filtering by IP SAN entries in the client certificate

Hi, I have a requirement to check incoming requests, something that would be succinctly expressed this way: Require expr "%{REMOTE_ADDR} in %{SSL_CLIENT_SAN_IPaddr}" This would check that the request IP address is among the IP addresses in the client certificate. Unfortunately, this

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Feb 14, 2017 at 2:19 PM, Daniel Gruno <humbed...@apache.org> wrote: > On 02/14/2017 01:16 PM, Andrei Ivanov wrote: > > On Tue, Feb 14, 2017 at 1:59 PM, Daniel Gruno <humbed...@apache.org > > <mailto:humbed...@apache.org>> wrote: > > > >

Re: [users@httpd] mod_lua and subprocess_env

On Tue, Feb 14, 2017 at 1:59 PM, Daniel Gruno <humbed...@apache.org> wrote: > On 02/14/2017 12:38 PM, Andrei Ivanov wrote: > > Hi, > > I'm trying to create a lua authorization script but I can't seem to > > access the request environment: > > >

[users@httpd] mod_lua and subprocess_env

Hi, I'm trying to create a lua authorization script but I can't seem to access the request environment: require 'apache2' function authz_check_remote_ip_in_client_san(r) r:err("remote_ip_in_client_san running..."); r:alert("uri: " .. r.uri); r:alert("useragent_ip: " ..

Re: [users@httpd] SSL_CLIENT_SAN IP addr validation

I think the nicest way would be like mod_ssl does with PeerExtList: Example SSLRequire "foobar" in PeerExtList("1.2.3.4.5.6") So at least it's nice to know Apache Httpd already does this in some cases. I guess I'll update my ticket, or maybe create a new one for all the subjectAltName

Re: [users@httpd] SSL_CLIENT_SAN IP addr validation

ould be something like this: > > Require expr "%{SSL_CLIENT_SAN_DNS_1} == %{REMOTE_ADDR}" > > > -- > > With Best Regards, > Marat Khalili > > On 19/12/16 18:48, Andrei Ivanov wrote: > > Hi, > Yes, I did notice the suggestion of using Require expr, the probl

Re: [users@httpd] SSL_CLIENT_SAN IP addr validation

same organizational unit and verify > SSL_CLIENT_S_DN_OU as well as SSL_CLIENT_S_DN_O. > -- > > With Best Regards, > Marat Khalili > > On 15/12/16 13:46, Andrei Ivanov wrote: > > Hi, > I'm trying to validate incoming requests by comparing the request IP to > the IP addresses provi

[users@httpd] Re: SSL_CLIENT_SAN IP addr validation

Anybody? :-/ On Thu, Dec 15, 2016 at 12:46 PM, Andrei Ivanov <andrei.iva...@gmail.com> wrote: > Hi, > I'm trying to validate incoming requests by comparing the request IP to > the IP addresses provided in the client certificate subjectAltName. > > Searching around, I found h

[users@httpd] SSL_CLIENT_SAN IP addr validation

Hi, I'm trying to validate incoming requests by comparing the request IP to the IP addresses provided in the client certificate subjectAltName. Searching around, I found http://wiki.cacert.org/ApacheServerClientCertificateAuthentication, which gives an example using the email address: SSLRequire