Re: [users@httpd] filtering by IP SAN entries in the client certificate

2017-02-17 Thread Andrei Ivanov
On Thu, Feb 16, 2017 at 11:38 AM, Andrei Ivanov wrote: > On Wed, Feb 15, 2017 at 12:46 PM, Daniel Gruno > wrote: > >> On 02/15/2017 11:31 AM, Andrei Ivanov wrote: >> > Hi, >> > I have a requirement to check incoming requests, something that would be >> > succinctly expressed this way: >> > >> >

Re: [users@httpd] filtering by IP SAN entries in the client certificate

2017-02-16 Thread Andrei Ivanov
On Wed, Feb 15, 2017 at 12:46 PM, Daniel Gruno wrote: > On 02/15/2017 11:31 AM, Andrei Ivanov wrote: > > Hi, > > I have a requirement to check incoming requests, something that would be > > succinctly expressed this way: > > > > > > Require expr "%{REMOTE_ADDR} in %{SSL_CLIENT_SAN_IPaddr}" >

Re: [users@httpd] filtering by IP SAN entries in the client certificate

2017-02-15 Thread Daniel Gruno
On 02/15/2017 11:31 AM, Andrei Ivanov wrote: > Hi, > I have a requirement to check incoming requests, something that would be > succinctly expressed this way: > > > Require expr "%{REMOTE_ADDR} in %{SSL_CLIENT_SAN_IPaddr}" > > > This would check that the request IP address is among the IP a

[users@httpd] filtering by IP SAN entries in the client certificate

2017-02-15 Thread Andrei Ivanov
Hi, I have a requirement to check incoming requests, something that would be succinctly expressed this way: Require expr "%{REMOTE_ADDR} in %{SSL_CLIENT_SAN_IPaddr}" This would check that the request IP address is among the IP addresses in the client certificate. Unfortunately, this doesn'