Mailing List Archive: Apache: Bugs

[Bug 53006] SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off'

Index | Next | Previous | View Threaded

bugzilla at apache

Aug 17, 2012, 5:55 AM

Post #1 of 6 (268 views)
Permalink

[Bug 53006] SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off'

https://issues.apache.org/bugzilla/show_bug.cgi?id=53006

--- Comment #6 from Joe Orton <jorton [at] redhat> ---
Created attachment 29240
--> https://issues.apache.org/bugzilla/attachment.cgi?id=29240&action=edit
mod_ssl wildcard proxy cn match

Can you try this patch?

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Aug 17, 2012, 5:57 AM

Post #2 of 6 (272 views)
Permalink

[Bug 53006] SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off' [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=53006

Joe Orton <jorton [at] redhat> changed:

What |Removed |Added
----------------------------------------------------------------------------
Attachment #29240|0 |1
is obsolete| |

--- Comment #7 from Joe Orton <jorton [at] redhat> ---
Created attachment 29241
--> https://issues.apache.org/bugzilla/attachment.cgi?id=29241&action=edit
patch v2

That had from an off-by-one. Try this instead?

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Aug 17, 2012, 6:00 AM

Post #3 of 6 (271 views)
Permalink

[Bug 53006] SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off' [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=53006

Eric Covener <covener [at] gmail> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |covener [at] gmail

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Aug 17, 2012, 7:25 AM

Post #4 of 6 (263 views)
Permalink

[Bug 53006] SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off' [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=53006

--- Comment #8 from Petter Berntsen <petterb [at] gmail> ---
Works! :)

I verified by commenting out the SSLProxyCheckPeerExpire directive - making the
site fail. Patch, and voila, the site works again.

Enabling the directive again has no apparent effect, as i expected.

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Aug 17, 2012, 8:10 AM

Post #5 of 6 (265 views)
Permalink

[Bug 53006] SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off' [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=53006

--- Comment #9 from ybudweiser <ybudweiser [at] gmail> ---
Verified Working on 2.4.2! :)
Thanks!

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

bugzilla at apache

Aug 21, 2012, 7:47 AM

Post #6 of 6 (250 views)
Permalink

[Bug 53006] SSLProxy to server with wildcard certificate requires 'SSLProxyCheckPeerCN off' [In reply to]

https://issues.apache.org/bugzilla/show_bug.cgi?id=53006

--- Comment #10 from Joe Orton <jorton [at] redhat> ---
Thanks for testing it out.

Done in r1375584.

--
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe [at] httpd
For additional commands, e-mail: bugs-help [at] httpd

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads