Re: [VOTE] Release Apache Traffic Server 7.1.3 (RC0)

2018-04-10 Thread Leif Hedstrom
> On Apr 9, 2018, at 3:34 PM, Leif Hedstrom wrote: > > I've prepared a release for 7.1.3 (RC0), which is a bug fix release on the > previous v7.1.2 release. The release notes for 7.1.3 is available at: > > https://github.com/apache/trafficserver/milestone/16?closed=1 > > > or for a br

TS_SSL_SERVER_VERIFY_HOOK questions

2018-04-10 Thread Christopher Reynolds
Hi, I am trying to use this hook in version 7.1.2 of Traffic Server. I have backported the commit (https://github.com/apache/trafficserver/commit/00cf3d3b555a8d277831a9b49e1c293541a08724) and it is called from within the verify_callback function in SSLClientUtils. I have some questions though.

How to include details of TLS verification failures in HTTP responses

2018-04-10 Thread Paul Storey
Hi I'm working in a context in which a plain HTTP request is getting remapped to HTTPS. I have enabled verification of the origin server certificate (proxy.config.ssl.client.verify.server INT 1). When verification fails, I get a generic 'could not connect' HTTP response message (code 502). I