[users@httpd] SSL-Settings for Healthchecks (mod_proxy_balancer)

2018-07-10 Thread Dominik Stillhard
Hello all apache-users! I'm trying to set up load-balancing to backends which use different SSL/TLS settings. I'm using version 2.4.33 of apache. According to documentation it should be possible to set SSLProxy* directives inside a section. I'm trying to do something like this : SSLProxyEngi

AW: [users@httpd] SSL-Settings for Healthchecks (mod_proxy_balancer)

2018-07-10 Thread Dominik Stillhard
M, Yann Ylavic wrote: > > Hi Dominik, > > > > On Tue, Jul 10, 2018 at 1:03 PM, Dominik Stillhard > > wrote: > >> > >> I’m trying to set up load-balancing to backends which use different > >> SSL/TLS settings. > >> > >> I’m using v

[users@httpd] SNI extension for healthchecks

2018-10-16 Thread Dominik Stillhard
Hello all I face the problem, that the sni extension is not set on healthcheck-requests to a backend using tls. Because healthchecks are negative, this leads to ordinary requests also beeing denied. on the backend server i have the following error: AH02033: No hostname was provided via SNI for

AW: [users@httpd] SNI extension for healthchecks

2018-10-19 Thread Dominik Stillhard
gt; > On Tue, Oct 16, 2018 at 12:44 PM Dominik Stillhard security-providers.ch> wrote: > > > > I face the problem, that the sni extension is not set on > > healthcheck-requests to a > backend using tls. Because healthchecks are negative, this leads to ordinary > re

AW: [users@httpd] SNI extension for healthchecks

2018-10-22 Thread Dominik Stillhard
org > Betreff: Re: [users@httpd] SNI extension for healthchecks > > Hi Dominik, > > sorry for the late response. > > On Tue, Oct 16, 2018 at 12:44 PM Dominik Stillhard security-providers.ch> wrote: > > > > I face the problem, that the sni extension is not set

AW: [users@httpd] SNI extension for healthchecks

2018-10-23 Thread Dominik Stillhard
@httpd] SNI extension for healthchecks > > Hi Dominik, > > On Mon, Oct 22, 2018 at 1:49 PM Dominik Stillhard > providers.ch> wrote: > > > > I've tested the configuration you proposed. > > Unfortunately the problem is not solved by using hostnames. > >

AW: [users@httpd] SNI extension for healthchecks

2018-10-24 Thread Dominik Stillhard
solve the problem. Still no SNI in > healthchecks... > > Regards Dominik > > > > -Ursprüngliche Nachricht- > > Von: Yann Ylavic > > Gesendet: Montag, 22. Oktober 2018 15:15 > > An: users@httpd.apache.org > > Betreff: Re: [users@httpd] SNI extensio

[users@httpd] mod_reqtimout can NOT be set on VHost

2020-01-24 Thread Dominik Stillhard
Hi all To be honest, I don't know whether I am missing something completely or whether mod_reqtimeout documentation is completely wrong. I just didn't ever manage the timeouts to be applied as I understood it from documentation... after searching the web and finding this conversation, http://apa

AW: [users@httpd] mod_reqtimout can NOT be set on VHost

2020-01-24 Thread Dominik Stillhard
> Betreff: Re: [users@httpd] mod_reqtimout can NOT be set on VHost > > On Fri, Jan 24, 2020 at 8:13 AM Dominik Stillhard security-providers.ch> wrote: > > > > Hi all > > > > To be honest, I don’t know whether I am missing something completely or > whether

[users@httpd] session resumption not possible after graceful restart if tlsv1.3

2020-02-06 Thread Dominik Stillhard
Hello dear apache users With TLSv1.2 it is possible to resume a ssl-session after a graceful restart, if a sessioncache is defined vie SSLSessionCache directive. When I try to do the same with TLSv1.3, a full handshake is performed. Without the graceful restart, resumption works correctly. Teste