Re: SSLRequire problem

David Rosenstrauch <[email protected]> Fri, 20 Nov 2009 10:28:33 -0500
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <[email protected]>
On 11/20/2009 04:50 AM, Joe Orton wrote:
> On Thu, Nov 19, 2009 at 03:19:00PM -0500, David Rosenstrauch wrote:
>> Hi.  I'm tearing my hair out over an SSLRequire directive that doesn't  
>> seem to be working.  Can anyone help?
>>
>> The directive is actually quite simple:
>>
>>    # Require SSL over non-obvious port 81 for SVN access
>>    SSLRequire %{SERVER_PORT} == 81
> 
> The port which %{SERVER_PORT} expands to is determined by the settings 
> of UseCanonicalPhysicalPort and UseCanonicalName.  For different 
> combinations it will depend on either what the client sends in the 
> request's Host header, what the ServerName directive is set to in the 
> vhost, or what httpd derives as the "canonical" name for the vhost to be 
> otherwise.
> 
> See docs for more info:
> 
> http://httpd.apache.org/docs/2.2/mod/core.html#usecanonicalname
> http://httpd.apache.org/docs/2.2/mod/core.html#usecanonicalphysicalport
> 
> Regards, Joe

Huh!  Never heard of those before!

OK, well, I'm still not sure I quite understand the reason why, but 
"UseCanonicalPhysicalPort on" does seem to have fixed the problem.

Thanks much for the help!

DR
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]