Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Yann Ylavic
On Thu, Feb 16, 2017 at 5:16 PM, Andrei Ivanov wrote: > > This one still doesn't work: > Require expr "%{REMOTE_ADDR} in PeerExtList('2.5.29.17')" > AH00526: Syntax error on line 145 of /etc/httpd/conf.d/ssl.conf: > Cannot parse expression in require line: syntax error, unexpected $end The expr o

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Eric Covener
On Thu, Feb 16, 2017 at 11:16 AM, Andrei Ivanov wrote: > Is there a way to debug this? To print the values from the expression in the > logs maybe? One simple way to debug is to use the same [sub-]expressions in mod_headers conditions or header values -- Eric Covener cove...@gmail.com -

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Andrei Ivanov
On Thu, Feb 16, 2017 at 5:20 PM, Yann Ylavic wrote: > On Thu, Feb 16, 2017 at 2:46 PM, Andrei Ivanov > wrote: > > > > I gave it a try, but seems to reach the same limitation of the expression > > engine :-( > > NSSRequire %{REMOTE_ADDR} in PeerExtList('2.5.29.17') > > or > > Require expr "%{REMO

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Yann Ylavic
On Thu, Feb 16, 2017 at 2:46 PM, Andrei Ivanov wrote: > > I gave it a try, but seems to reach the same limitation of the expression > engine :-( > NSSRequire %{REMOTE_ADDR} in PeerExtList('2.5.29.17') > or > Require expr "%{REMOTE_ADDR} in PeerExtList('2.5.29.17')" > > AH00526: Syntax error on lin

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Andrei Ivanov
On Thu, Feb 16, 2017 at 2:49 PM, Yann Ylavic wrote: > On Tue, Feb 14, 2017 at 1:24 PM, Andrei Ivanov > wrote: > > > > I'm using mod_nss exactly because mod_ssl doesn't expose that variable > and > > my issue that requests that is sitting ignored for 2 months now :-( > > Did you try something wit

RE: [users@httpd] mod_substitute only replaces first pattern match

2017-02-16 Thread Uwe.Poliak
Dear Luca, thanks for your help. At the moment I am a little bit busy with other things, but I'll check this next week and let you know if the problem was solved by changing the regex. Kind regards Uwe - To unsubscribe, e-mail

Re: [users@httpd] mod_lua and subprocess_env

2017-02-16 Thread Yann Ylavic
On Tue, Feb 14, 2017 at 1:24 PM, Andrei Ivanov wrote: > > I'm using mod_nss exactly because mod_ssl doesn't expose that variable and > my issue that requests that is sitting ignored for 2 months now :-( Did you try something with SSLRequire or a expression like "'' -in PeerExtList('2.5.29.17')"

Re: [users@httpd] filtering by IP SAN entries in the client certificate

2017-02-16 Thread Andrei Ivanov
On Wed, Feb 15, 2017 at 12:46 PM, Daniel Gruno wrote: > On 02/15/2017 11:31 AM, Andrei Ivanov wrote: > > Hi, > > I have a requirement to check incoming requests, something that would be > > succinctly expressed this way: > > > > > > Require expr "%{REMOTE_ADDR} in %{SSL_CLIENT_SAN_IPaddr}" >