RE: [users@httpd] Urgent issue with reverse proxy

2021-02-25 Thread Jason Pyeron
> From: Sean Hurley > Sent: Thursday, February 25, 2021 12:04 PM > To: users@httpd.apache.org > Subject: [users@httpd] Urgent issue with reverse proxy > > Greetings, > > I have an issue with a long payload not being delivered by an Apache 2.4 > reverse proxy. Did it ever work? > > Below is

[users@httpd] Urgent issue with reverse proxy

2021-02-25 Thread Sean Hurley
Greetings, I have an issue with a long payload not being delivered by an Apache 2.4 reverse proxy. Below is what I am trying to send: AH00947: connected

Re: Re: [users@httpd] Set SSLCipherSuite dependent on client IP

2021-02-25 Thread Brian Wolfe
The question is if the "If/Else" block is being evaluated. I suspect it is, but the selected CipherSuites are not available and therefore the global setting is used to negotiate. On Thu, Feb 25, 2021 at 7:50 AM Yann Ylavic wrote: > On Thu, Feb 25, 2021 at 1:44 PM Brian Wolfe > wrote: > > > >

Re: Re: [users@httpd] Set SSLCipherSuite dependent on client IP

2021-02-25 Thread Yann Ylavic
On Thu, Feb 25, 2021 at 1:44 PM Brian Wolfe wrote: > > Are you sure that you have any MD5 ciphers enabled. Wrong thread? Regards; Yann. - To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org For additional commands,

Re: Re: [users@httpd] Set SSLCipherSuite dependent on client IP

2021-02-25 Thread Brian Wolfe
Are you sure that you have any MD5 ciphers enabled. Most of them are disabled nowadays. For example on my OSX I only have 1 MD5 available: :~ $ openssl ciphers -v ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH

Re: Re: [users@httpd] Set SSLCipherSuite dependent on client IP

2021-02-25 Thread Yann Ylavic
On Wed, Feb 24, 2021 at 6:01 PM Hildegard Meier wrote: > > I thought about something like that as cause, but since the client IP is > known from the very first start of the request, before TLS handshake, I > thought it could be evaluated. Yes but to determine the context from which the takes

Re: Re: [users@httpd] Set SSLCipherSuite dependent on client IP

2021-02-25 Thread Rainer Canavan
On Wed, Feb 24, 2021 at 6:01 PM Hildegard Meier wrote: [...] > Could it be possible another way to give clients of a specific vHost > different SSLCipherSuite's depending on their IP address? (cipher of first > handshake, no renegotiation) You can work around this by setting up a separate