On Wed, Feb 22, 2017 at 3:36 PM, Yann Ylavic <ylavic....@gmail.com> wrote:
> On Wed, Feb 22, 2017 at 11:19 AM, Andrei Ivanov <andrei.iva...@gmail.com>
> wrote:
> > On Wed, Feb 22, 2017 at 12:02 PM, Yann Ylavic <ylavic....@gmail.com>
> wrote:
> >>
> >> On Wed, Feb 22, 2017 at 10:58 AM, Andrei Ivanov <
> andrei.iva...@gmail.com>
> >> wrote:
> >> >
> >> > So... do I have a chance to get it running on RHEL 7.3 which ships
> with
> >> > 2.4.6?
> >>
> >> That may work in 2.4.6, I just didn't try ;)
> >> "Require expr ... -in" exists (as far as I can tell), and so is
> >> PeerExtList I think.
> >> Did you try it?
> >
> >
> > I didn't try on 2.4.6 because it fails even on 2.4.25:
> > <Location />
> > Require expr "('IP Address:' . %{REMOTE_ADDR}) -in
> > PeerExtList('2.5.29.17')"
> > </Location>
> >
> > Cannot parse expression in require line: syntax error, unexpected ')'
>
> My bad, please try without the parentheses:
>
> Require expr "'IP Address:' . %{REMOTE_ADDR} -in
> PeerExtList('2.5.29.17')
Did that too, Apache starts but the expression always returns false :-(
And I can't find a way to debug it, to see what PeerExtList('2.5.29.17')
returns for my client certificate.
