Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Pavel Matěja
Dne Čt 20. února 2014 08:13:13, Eric Covener napsal(a): On Thu, Feb 20, 2014 at 7:47 AM, Pavel Matěja pa...@netsafe.cz wrote: Dne St 19. února 2014 21:09:10, William A. Rowe Jr. napsal(a): I believe that Kaspar and Ruediger are still entirely at odds with my position, but this 'enhancement'

Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Yann Ylavic
mod_ssl won't fill in the SNI if it's an IP address, the check is not in mod_proxy_http but in ssl_io_filter_connect() : if (hostname_note sc-proxy-protocol != SSL_PROTOCOL_SSLV2 sc-proxy-protocol != SSL_PROTOCOL_SSLV3 apr_ipsubnet_create(ip,

Re: Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Pavel Matěja
Dne Čt 20. února 2014 15:00:05, Yann Ylavic napsal(a): mod_ssl won't fill in the SNI if it's an IP address, the check is not in mod_proxy_http but in ssl_io_filter_connect() : if (hostname_note sc-proxy-protocol != SSL_PROTOCOL_SSLV2 sc-proxy-protocol !=

Re: Re: Re: Re: Behavior of Host: vs. SNI Hostname in proxy CONNECT requests

2014-02-20 Thread Eric Covener
Please post the full details in a bug report It's qute simple. I meant the full details (config, logs, etc) in bugzilla. https://issues.apache.org/bugzilla/