Hi

I'm working in a context in which a plain HTTP request is getting remapped to 
HTTPS.  I have enabled verification of the origin server certificate 
(proxy.config.ssl.client.verify.server INT 1).  When verification fails, I get 
a generic 'could not connect' HTTP response message (code 502).  I'd like this 
message to contain details of the verification failure.

I've experimented with taking control of the verification myself, by using 
TS_LIFECYCLE_CLIENT_SSL_CTX_INITIALIZED_HOOK and configuring OpenSSL to call my 
own verification callback.  And I have experimented with using 
TS_HTTP_READ_RESPONSE_HDR_HOOK to take control of the presentation of the HTTP 
response.  However my problem is that I can't find a way to connect the two - 
so that the results of the verification are available when building the 
response.

Any help/thoughts much appreciated.

Thank you

Paul Storey


Paul Storey

Senior Software Engineer

[Telephone] +44 118 903 8662

[Twitter]@clearswift

[Clearswift] <http://www.clearswift.com/>

1310 Waterside | Arlington Business Park | Theale | Berkshire | RG7 4SA | 
United Kingdom

Adaptive Security & Data Loss Prevention solutions for email, web, cloud apps 
and endpoint. On-premise, Hosted and Managed Service options available.

Looking for a Managed Email Security Service? Clearswift offers an affordable 
and effective solution. Learn more 
here.<https://www.clearswift.com/sites/default/files/documents/datasheets/Clearswift_Managed_Email_Security_Service_Datasheet.pdf>

This e-mail and any files transmitted with it are strictly confidential, may be 
privileged and are intended only for use by the addressee unless otherwise 
indicated.  If you are not the intended recipient any use, dissemination, 
printing or copying is strictly prohibited and may be unlawful.  If you have 
received this e-mail in error, please delete it immediately and contact the 
sender as soon as possible.  Clearswift cannot be held liable for delays in 
receipt of an email or any errors in its content. Clearswift accepts no 
responsibility once an e-mail and any attachments leave us. Unless expressly 
stated, opinions in this message are those of the individual sender and not of 
Clearswift.

This email message has been inspected by Clearswift for inappropriate content 
and security threats. 

To find out more about Clearswift’s solutions please visit www.clearswift.com

Reply via email to