On Mon, Feb 20, 2017 at 11:31 AM, Andrei Ivanov <andrei.iva...@gmail.com>
wrote:
> On Fri, Feb 17, 2017 at 12:18 PM, Andrei Ivanov <andrei.iva...@gmail.com>
> wrote:
>
>>
>> On Thu, Feb 16, 2017 at 9:26 PM, Eric Covener <cove...@gmail.com> wrote:
>>
>>> On Thu, Feb 16, 2017 at 11:16 AM, Andrei Ivanov <andrei.iva...@gmail.com>
>>> wrote:
>>> > Is there a way to debug this? To print the values from the expression
>>> in the
>>> > logs maybe?
>>>
>>> One simple way to debug is to use the same [sub-]expressions in
>>> mod_headers conditions or header values
>>>
>>
>> Great idea, thanks :-)
>>
>> Header set Client-IP "%{REMOTE_ADDR}e"
>> Header set Client-SAN "%{PeerExtList('2.5.29.17')}s"
>> Header set Client-DN "%{SSL_CLIENT_S_DN}s"
>>
>> Client-IP: 159.107.78.110
>> Client-SAN: (null)
>> Client-DN: CN=client-with-subjectAltName-with-just-IPs-2
>>
>> Unfortunately, I don't get the Client SAN :-(
>>
>> Btw, this is with Apache/2.4.6 (Red Hat Enterprise Linux)
>> OpenSSL/1.0.1e-fips
>> I was also trying the Header with expr=value, but then I noticed it's
>> available in 2.4.10 and later.
>>
>
> Can anybody understand why this doesn't work? :-(
> Please help.
>
Yan? Any thoughts please?
