RE: [users@httpd] TLS Proxy client certificates per virtualhost

2016-10-03 Thread Mark Blackman
configuration/instance though. > -Original Message- > From: Marat Khalili [mailto:m...@rqc.ru] > Sent: 30 September 2016 17:33 > To: users@httpd.apache.org > Subject: Re: [users@httpd] TLS Proxy client certificates per virtualhost > > Do you mean proxy _client_

RE: [users@httpd] TLS Proxy client certificates per virtualhost

2016-10-03 Thread Mark Blackman
Great, thanks. Although I really need it for Apache 2.2 as well :) I will see if we can find some time for it. > -Original Message- > From: Rainer Jung [mailto:rainer.j...@kippdata.de] > Sent: 30 September 2016 18:12 > To: users@httpd.apache.org > Subject: Re: [users@h

Re: [users@httpd] TLS Proxy client certificates per virtualhost

2016-09-30 Thread Rainer Jung
Hi Mark, in trunk sinve a few months we've got the feature, that any SSLProxy* directive can be used in vhosts but more important per block. The feature is proposed for addition to 2.4.x. Currently two more reviewers are needed. The proposed patch is available at http://home.apache.org/~yla

Re: [users@httpd] TLS Proxy client certificates per virtualhost

2016-09-30 Thread Marat Khalili
Do you mean proxy _client_ certificates? That is, certificates for identifying your proxy to upstream server(s)? Looks like there's indeed no option to make them virtual-host dependent. I wonder why do you need it. Local server (proxy or not) certificates can be made virtual-host dependent usi

[users@httpd] TLS Proxy client certificates per virtualhost

2016-09-30 Thread Mark Blackman
Hi, What kind of options do I have if I want to use different SSL proxy certificates for different virtual hosts? SSLProxyMachineCertificateFile is close, but only has server scope. What's the equivalent for virtualhost context? I have a feeling I have zero options, but would like to confirm t