logo       

Re: [Pound Mailing List] SSL Headers: msg#00060

web.pound.general

Subject: Re: [Pound Mailing List] SSL Headers

On Tue, 2006-05-30 at 09:10 +0100, Will Tatam wrote:
> Robert Segall wrote:
> > On Wed, 2006-05-24 at 17:30 +0100, Will Tatam wrote:
> >
> >> Can an option be added to pass the X_SSL_* headers to the backend ?
> >>
> >> If this were done then our web apps could be built to detect the
> >> presence of these headers to determine if the page has been requested
> >> via https regardless of whether mod_ssl+apache or pound has been used
> >>
> >
> > You don't need any option. In the 2.x series the X-SSL-... headers are
> > added automatically for every SSL connection.
> >
> We are not seeing them, however if we manually add a header we see that
> header appear correctly

Please check what actually passes on the wire - some web servers remove
these headers! As far as we can tell the headers are added correctly by
Pound.
--
Robert Segall
Apsis GmbH
Postfach, Uetikon am See, CH-8707
Tel: +41-44-920 4904


--
To unsubscribe send an email with subject 'unsubscribe' to
pound-Ws3YcLWMCpvhvxM+mQhndA@xxxxxxxxxxxxxxxx
Please contact roseg-Ws3YcLWMCps@xxxxxxxxxxxxxxxx for questions.
http://www.apsis.ch/pound/pound_list/archive/2006/2006-05/1147719796000/1149010897000



<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise