mod_gnutls and mod_proxy (TLS termination)

2011-04-29 Thread Hardy Griech
Hi, I'm trying to use mod_gnutls for TLS termination without success. Relevant apache configuration lines inside the gnutls VirtualHost definition are: ProxyRequests Off ProxyPreserveHost On ProxyPass / http://127.0.0.1:81/ ProxyPassReverse / http://127.0.0.1:81/

Re: mod_gnutls and mod_proxy (TLS termination)

2011-04-29 Thread Ben Noordhuis
On Fri, Apr 29, 2011 at 10:27, Hardy Griech wrote: > I'm trying to use mod_gnutls for TLS termination without success. My first suggestion would be to use mod_ssl. Alternatively, compile Apache and mod_gnutls with -g -O0 and run it with `gdb --args httpd -X -e debug`. Put a breakpoint on the pre

Re: mod_gnutls and mod_proxy (TLS termination)

2011-04-29 Thread Hardy Griech
On 29.04.2011 11:09, Ben Noordhuis wrote: On Fri, Apr 29, 2011 at 10:27, Hardy Griech wrote: I'm trying to use mod_gnutls for TLS termination without success. My first suggestion would be to use mod_ssl. Forgot to mention: I've patched mod_gnutls for PSK usage. I've also thought about pat

Re: mod_gnutls and mod_proxy (TLS termination)

2011-04-29 Thread Hardy Griech
On 29.04.2011 11:09, Ben Noordhuis wrote: : Alternatively, compile Apache and mod_gnutls with -g -O0 and run it with `gdb --args httpd -X -e debug`. Put a breakpoint on the : I'm stuck with apaches compilation: /usr/share/apr-1.0/build/libtool --silent --mode=link i486-linux-gnu-gcc -pthread

Re: mod_gnutls and mod_proxy (TLS termination)

2011-04-29 Thread Hardy Griech
On 29.04.2011 15:10, Hardy Griech wrote: : Any way to do it better (i.e. correct)? : To answer myself: yes, there is a better way. - install 'apache2-dbg' - enter gdb with the above command line - run (in gdb) - break gdb when the modules have been loaded - set the breakpoint and continue wit

Re: mod_gnutls and mod_proxy (TLS termination)

2011-04-29 Thread Ben Noordhuis
> - mod_ssl (openssl?) does not obey the maximum fragmentation > length requested by the clients I think that this has been fixed in openssl 1.0.0.a. Monkey curiosity: why do you need it? > - install 'apache2-dbg' > - enter gdb with the above command line > - run (in gdb) > - break gdb when the

Re: mod_gnutls and mod_proxy (TLS termination)

2011-04-29 Thread Hardy Griech
On 29.04.2011 22:38, Ben Noordhuis wrote: - mod_ssl (openssl?) does not obey the maximum fragmentation length requested by the clients I think that this has been fixed in openssl 1.0.0.a. I thought that too, but all my tries with my piece of software did not show the expected results. Per