[Modules] mod_gnutls as TLS termination

Hardy Griech ntbox at mardys.de
Mon May 2 14:54:41 EDT 2011


On 28.04.2011 18:03, Hardy Griech wrote:
:
> I want to use mod_gnutls as a TLS termination point and proxy the clear
> text http stream after wards to another server (ProxyPass and
> ProxyPassReverse).
:

Investigating this issue, showed that in mgs_hook_pre_connection() the 
condition "if(c->remote_addr->hostname)" is never evaluated to true.

Modifying it to "if(c->remote_addr->hostname  || 
apr_strnatcmp(c->remote_ip,c->local_ip) == 0)" solved the problem, so 
that mod_gnutls is now capable of playing a TLS termination.

Any ideas how to catch the above condition (connection is from 
mod_proxy) reliably?  (my version is still a hack...).

Thanks

Hardy


More information about the Modules mailing list