Re: [users@httpd] mod_proxy_hcheck with Istio

2024-10-04 Thread Daniel Ferradal Márquez
On 30/9/24 10:50, Stanislav Samek wrote: Hi, I don't think that there is an issue with ssl. We have SSLProxyEngine turned on and also a backend name match with CN. In attachment you can find output from the curl command. Thank you What I would make sure in your case is SSLProtocols set u

RE: [users@httpd] How to fix Apache HTTPD Unauthenticated/Open Web Proxy Vulnerability?

2024-10-04 Thread Shinde, Pramod K
Thank you for pointing it out. After turning off the ProxyRequests and making one change within the below snippet resolved the Qualys vulnerabilities 62002 and 62054. AllowOverride None Options None Require all denied We made sure it doesn't break the integration we had with Apache HTTPD. Than