On Fri, Feb 17, 2017 at 12:18 PM, Andrei Ivanov <andrei.iva...@gmail.com>
wrote:
>
> On Thu, Feb 16, 2017 at 9:26 PM, Eric Covener <cove...@gmail.com> wrote:
>
>> On Thu, Feb 16, 2017 at 11:16 AM, Andrei Ivanov <andrei.iva...@gmail.com>
>> wrote:
>> > Is there a way to debug this? To print the values from the expression
>> in the
>> > logs maybe?
>>
>> One simple way to debug is to use the same [sub-]expressions in
>> mod_headers conditions or header values
>>
>
> Great idea, thanks :-)
>
> Header set Client-IP "%{REMOTE_ADDR}e"
> Header set Client-SAN "%{PeerExtList('2.5.29.17')}s"
> Header set Client-DN "%{SSL_CLIENT_S_DN}s"
>
> Client-IP: 159.107.78.110
> Client-SAN: (null)
> Client-DN: CN=client-with-subjectAltName-with-just-IPs-2
>
> Unfortunately, I don't get the Client SAN :-(
>
> Btw, this is with Apache/2.4.6 (Red Hat Enterprise Linux)
> OpenSSL/1.0.1e-fips
> I was also trying the Header with expr=value, but then I noticed it's
> available in 2.4.10 and later.
>
Can anybody understand why this doesn't work? :-(
Please help.
