[users@httpd] suggested modification to mod_ssl

2019-10-26 Thread Schettler, Marty L.
My application uses a mod_perl fixup handler to connect to an external service to determine user authorization via client PKI certificate. However, mod_ssl doesn't reliably supply the client certificate information (in particular SSL_CLIENT_S_DN) in time for my module to process it. I suggest

RE: [users@httpd] Crash in mod_ssl after 2.4.29

2019-02-28 Thread Schettler, Marty L.
e: [users@httpd] Crash in mod_ssl after 2.4.29 Hello Marty, On Thu, Jan 31, 2019 at 7:13 PM Schettler, Marty L. wrote: > > I have a simple ssl reverse proxy set up that has been working for years up > through 2.4.29. When upgrading to 2.4.38, it now crashes periodically. It is > repeat

[users@httpd] Crash in mod_ssl after 2.4.29

2019-01-31 Thread Schettler, Marty L.
Hello - I have a simple ssl reverse proxy set up that has been working for years up through 2.4.29. When upgrading to 2.4.38, it now crashes periodically. It is repeatable, but inconsistent. It experiences a segmentation fault at ssl_engine_kernel.c at line 1727: It is in the function

RE: [users@httpd] Reverse proxy not sending certificate

2018-10-18 Thread Schettler, Marty L.
: [users@httpd] Reverse proxy not sending certificate A number of regressions are fixed in 2.4.35, please retest against that version. On Fri, Oct 12, 2018, 15:27 Schettler, Marty L. mailto:martin.l.schett...@leidos.com>> wrote: My reverse proxy config doesn’t work with SSL any more as

[users@httpd] Reverse proxy not sending certificate

2018-10-12 Thread Schettler, Marty L.
My reverse proxy config doesn't work with SSL any more as I try to upgrade from 2.4.29 to 2.4.34. My config: SSLProxyEngine On SSLProxyMachineCertificateFile /path/to/server_crt_and_key.crt SSLProxyCACertificatePath /etc/cacerts ProxyPass https://host01:9443/p ProxyPassReverse