--- Manne Anliot <[EMAIL PROTECTED]> wrote:
> Hi all,
> 
> New to mod_ssl I've stumled upon a very disturbing problem: I'm
> coding an Apache module that needs to know whether we have a secure
> (SSL) connection or not in the URI Translation phase. We've solved
> this problem on for example MS IIS by checking SSI/CGI environments
> with the standard SSL information (HTTPS=on). A quick look in the
> mod_ssl source reveals that this variable isn't set before the
pre-run
> fixup phase (just before the response handlers), so this solution
> seems inadequate.
> 
> So in short: How can a module check if the current request is a
> secure one? (without workarounds � la specifying secure ports in
> configuration files etc)

I'm not sure off the top of my head exactly what you mean here.
Maybe I'm just being dense. Sorry.

I do know that on our server we're using the standard port 80 for http,
and 443 for https, so I check for secure connections in my
PostReadRequestHandler with 

     return OK if 443 == $r->get_server_port;

I don't know if that's the sort of workaround you meant -- in our case,
we know what ports are what, and this works before the system has to
bother with access/authen/authorization handlers, path translation, or
most anything else.
 
> A mod_ssl solution or even better a generic SSL solution would be soo
> much
> appretiated.
> 
> (Apache/1.3.14, mod_ssl/2.7.2, OpenSSL/0.9.6)
> 
> Regards,
> Manne Anliot
> Sweden.
> 
> mailto:[EMAIL PROTECTED]
>
______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                  
> www.modssl.org
> User Support Mailing List                     
> [EMAIL PROTECTED]
> Automated List Manager                           
[EMAIL PROTECTED]


__________________________________________________
Do You Yahoo!?
Get email at your own domain with Yahoo! Mail. 
http://personal.mail.yahoo.com/?.refer=text
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to