On Fri, Feb 24, 2017 at 10:58 PM, Andrei Ivanov <andrei.iva...@gmail.com>
wrote:
> On Feb 24, 2017 22:54, "Yann Ylavic" <ylavic....@gmail.com> wrote:
>
> On Fri, Feb 24, 2017 at 6:50 PM, Andrei Ivanov <andrei.iva...@gmail.com>
> wrote:
> >
> > I've managed to apply your patch and rebuild Apache and now I have:
> > Header set Client-IP "expr=%{REMOTE_ADDR}"
> > Header set Client-SAN "expr=%{PeerExtList:2.5.29.17}"
> > Header set Client-DN "expr=%{SSL_CLIENT_S_DN}"
>
> Could you please add:
> Header set Expr "'IP Address:'.%{REMOTE_ADDR} -in
> PeerExtList('2.5.29.17')"
> ?
>
> If it outputed "Expr: IP Addressfalse" that'd be issue with operators'
> precedence.
> I'll try on my side, but you may beat me to it since you have the
> environment...
>
>
> Ugh, it's my work environment, I'll be able to access it only on Monday.
>
>
Tried now, I've adapted your suggestion a bit as it doesn't seem correct:
Header set Expr "expr='IP Address:'.%{REMOTE_ADDR} -in
%{PeerExtList:2.5.29.17}"
This results in:
Expr: 'IP Address:'.159.107.78.127 -in email:<redacted1>,
email:<redacted2>, IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1, IP
Address:159.107.78.127, IP Address:FE80:0:0:0:6D03:4CE1:C15F:5A44
As far as I understand, it doesn't perform the concatenation properly.
I've tried
Header set Expr "expr='%{IP Address:'.%{REMOTE_ADDR}} -in
%{PeerExtList:2.5.29.17}"
But I get a parse error at startup:
Can't parse value expression : syntax error, unexpected T_ERROR, expecting
T_VAR_END or ':': Invalid character in variable name ' '
But I think mod_headers has some different way of interpreting expressions,
because this doesn't work:
Header set matched false
<If "'IP Address:'.%{REMOTE_ADDR} -in %{PeerExtList:2.5.29.17}">
Header set matched true
</If>
Cannot parse condition clause: syntax error, unexpected T_VAR_BEGIN,
expecting T_ID or '{
