https://issues.apache.org/bugzilla/show_bug.cgi?id=29744





--- Comment #83 from Lionel VICTOR <[email protected]>  2009-07-20 02:04:50 
PST ---
(In reply to comment #82)

Well stunnel won't let you to enforce a security policy based on SSL mutual
auth to allow proxy_connect access (for instance): so you can have both a ssl
web site for everyone PLUS a proxy for authenticated users... Indeed you are
right, the feature is missing...

>From comment #60 someone suggested that we push a patch on the @dev mailing
list... I guess most people agree with the fact the patch is acceptable (if it
does not introduce any kind of regression)

>From what I could gather from the archives of the apache dev mailing list there
were a few posts by "Sudhaker Raj" but not patch proposal ?

So it's up to us... we took something at some point we should give it back
now...

Sudhaker ? did you manage to build something out of trunk (at some point in
time) and propose a patch ?

Can we help ?

I suppose the apache team has validation campaings to validate their code both
in terms of bugs (regression) and performances... I will not be able to support
that, but I can probably checkout trunk patch and propose a fix on the dev
mailing list if it hasn't been done...

This bug is marked 'ASSIGNED' can the bug owner write some kind of directions ?
or simply confirm that we must keep pushing on the dev mailing list ?

cheers

> Bug or feature request,.. this functionality is missing. This feature seems
> like a very nice solution for people behind very restrictive company proxies.
> Of course I could just turn off apache and use stunnel on port 443, but I
> prefer 'enhanced' mod_proxy to do that. Other option is to multiplex tls
> traffic by completely new module. I wrote one as excerise, but eventually
> revisited idea with mod_proxy.
> 
> Is it really that difficult to include some kind of switch to allow CONNECT to
> work over SSL? I'm completely fine with the default as 'off'.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to