Re: ?==?utf-8?q? HSTS (or custom hea ders)?==?utf-8?q? ?
"Frank Schmirler" <frank.schmirler-PfwzoFMxJyVWk0Htik3J/[email protected]> Mon, 30 Dec 2019 09:13:09 +0100
| Newsgroups | gmane.comp.web.pound.general |
|---|---|
| Message-ID | <2b-5e09b180-3-7ae77d00@258145686> |
------=_=-_OpenGroupware_org_NGMime-43-1577693589.727737-1------ Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Content-Length: 618 Am Donnerstag, 26. Dezember 2019 14:57 CET, [email protected]= schrieb: > Does Pound support HSTS ? > > Does Pound support adding headers to the outgong web response? > I see the "AddHeader" option which apparently adds headers to the > incoming request (to the back-end server), but I don't see any option= s > that let me add headers to the outgoing response (back to the client)= . I've attached the HSTS patch I posted years ago (updated to pound 2.8).= With the patch you can add the following directive to your config at s= ervice level: StrictTransportSecurity <SECONDS> Best regards, Frank ------=_=-_OpenGroupware_org_NGMime-43-1577693589.727737-1------ Content-Type: text/x-patch Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="pound-2.8-sts.patch" Content-Length: 8881 ZGlmZiAtdXIgUG91bmQtMi44Lm9yaWcvY29uZmlnLmMgUG91bmQtMi44L2NvbmZpZy5jCi0t LSBQb3VuZC0yLjgub3JpZy9jb25maWcuYwkyMDE4LTA1LTExIDEyOjE2OjA1LjAwMDAwMDAw MCArMDIwMAorKysgUG91bmQtMi44L2NvbmZpZy5jCTIwMTktMTItMzAgMDg6NTg6MzUuNDk0 NjgyODI1ICswMTAwCkBAIC03Niw3ICs3Niw3IEBACiBzdGF0aWMgcmVnZXhfdCAgRW1wdHks IENvbW1lbnQsIFVzZXIsIEdyb3VwLCBSb290SmFpbCwgRGFlbW9uLCBMb2dGYWNpbGl0eSwg TG9nTGV2ZWwsIEFsaXZlLCBTU0xFbmdpbmUsIENvbnRyb2w7CiBzdGF0aWMgcmVnZXhfdCAg TGlzdGVuSFRUUCwgTGlzdGVuSFRUUFMsIEVuZCwgQWRkcmVzcywgUG9ydCwgQ2VydCwgeEhU VFAsIENsaWVudCwgQ2hlY2tVUkw7CiBzdGF0aWMgcmVnZXhfdCAgRXJyNDE0LCBFcnI1MDAs IEVycjUwMSwgRXJyNTAzLCBNYXhSZXF1ZXN0LCBIZWFkUmVtb3ZlLCBSZXdyaXRlTG9jYXRp b24sIFJld3JpdGVEZXN0aW5hdGlvbjsKLXN0YXRpYyByZWdleF90ICBTZXJ2aWNlLCBTZXJ2 aWNlTmFtZSwgVVJMLCBIZWFkUmVxdWlyZSwgSGVhZERlbnksIEJhY2tFbmQsIEVtZXJnZW5j eSwgUHJpb3JpdHksIEhBcG9ydCwgSEFwb3J0QWRkcjsKK3N0YXRpYyByZWdleF90ICBTZXJ2 aWNlLCBTZXJ2aWNlTmFtZSwgVVJMLCBIZWFkUmVxdWlyZSwgSGVhZERlbnksIEJhY2tFbmQs IEVtZXJnZW5jeSwgUHJpb3JpdHksIEhBcG9ydCwgSEFwb3J0QWRkciwgU3RyaWN0VHJhbnNw b3J0U2VjdXJpdHk7CiBzdGF0aWMgcmVnZXhfdCAgUmVkaXJlY3QsIFJlZGlyZWN0TiwgVGlt ZU91dCwgU2Vzc2lvbiwgVHlwZSwgVFRMLCBJRDsKIHN0YXRpYyByZWdleF90ICBDbGllbnRD ZXJ0LCBBZGRIZWFkZXIsIERpc2FibGVQcm90bywgU1NMQWxsb3dDbGllbnRSZW5lZ290aWF0 aW9uLCBTU0xIb25vckNpcGhlck9yZGVyLCBDaXBoZXJzOwogc3RhdGljIHJlZ2V4X3QgIENB bGlzdCwgVmVyaWZ5TGlzdCwgQ1JMbGlzdCwgTm9IVFRQUzExLCBHcmFjZSwgSW5jbHVkZSwg Q29ublRPLCBJZ25vcmVDYXNlLCBIVFRQUzsKQEAgLTU2Miw2ICs1NjIsNyBAQAogICAgICAg ICBjb25mX2VycigiU2VydmljZSBjb25maWc6IG91dCBvZiBtZW1vcnkgLSBhYm9ydGVkIik7 CiAgICAgbWVtc2V0KHJlcywgMCwgc2l6ZW9mKFNFUlZJQ0UpKTsKICAgICByZXMtPnNlc3Nf dHlwZSA9IFNFU1NfTk9ORTsKKyAgICByZXMtPnN0cyA9IC0xOwogICAgIHB0aHJlYWRfbXV0 ZXhfaW5pdCgmcmVzLT5tdXQsIE5VTEwpOwogICAgIGlmKHN2Y19uYW1lKQogICAgICAgICBz dHJuY3B5KHJlcy0+bmFtZSwgc3ZjX25hbWUsIEtFWV9TSVpFKTsKQEAgLTU5MSw2ICs1OTIs OCBAQAogICAgICAgICAgICAgbGluW21hdGNoZXNbMV0ucm1fZW9dID0gJ1wwJzsKICAgICAg ICAgICAgIGlmKHJlZ2NvbXAoJm0tPnBhdCwgbGluICsgbWF0Y2hlc1sxXS5ybV9zbywgUkVH X05FV0xJTkUgfCBSRUdfRVhURU5ERUQgfCAoaWduX2Nhc2U/IFJFR19JQ0FTRTogMCkpKQog ICAgICAgICAgICAgICAgIGNvbmZfZXJyKCJVUkwgYmFkIHBhdHRlcm4gLSBhYm9ydGVkIik7 CisgICAgICAgIH0gZWxzZSBpZighcmVnZXhlYygmU3RyaWN0VHJhbnNwb3J0U2VjdXJpdHks IGxpbiwgNCwgbWF0Y2hlcywgMCkpIHsKKyAgICAgICAgICAgIHJlcy0+c3RzID0gYXRvaShs aW4gKyBtYXRjaGVzWzFdLnJtX3NvKTsKICAgICAgICAgfSBlbHNlIGlmKCFyZWdleGVjKCZI ZWFkUmVxdWlyZSwgbGluLCA0LCBtYXRjaGVzLCAwKSkgewogICAgICAgICAgICAgaWYocmVz LT5yZXFfaGVhZCkgewogICAgICAgICAgICAgICAgIGZvcihtID0gcmVzLT5yZXFfaGVhZDsg bS0+bmV4dDsgbSA9IG0tPm5leHQpCkBAIC04NDcsMTIgKzg1MCwxNiBAQAogICAgICAgICB9 IGVsc2UgaWYoIXJlZ2V4ZWMoJkxvZ0xldmVsLCBsaW4sIDQsIG1hdGNoZXMsIDApKSB7CiAg ICAgICAgICAgICByZXMtPmxvZ19sZXZlbCA9IGF0b2kobGluICsgbWF0Y2hlc1sxXS5ybV9z byk7CiAgICAgICAgIH0gZWxzZSBpZighcmVnZXhlYygmU2VydmljZSwgbGluLCA0LCBtYXRj aGVzLCAwKSkgewotICAgICAgICAgICAgaWYocmVzLT5zZXJ2aWNlcyA9PSBOVUxMKQorICAg ICAgICAgICAgaWYocmVzLT5zZXJ2aWNlcyA9PSBOVUxMKSB7CiAgICAgICAgICAgICAgICAg cmVzLT5zZXJ2aWNlcyA9IHBhcnNlX3NlcnZpY2UoTlVMTCk7Ci0gICAgICAgICAgICBlbHNl IHsKKyAgICAgICAgICAgICAgICBpZihyZXMtPnNlcnZpY2VzLT5zdHMgPj0gMCkKKyAgICAg ICAgICAgICAgICAgICAgY29uZl9lcnIoIlN0cmljdFRyYW5zcG9ydFNlY3VyaXR5IG5vdCBh bGxvd2VkIGluIEhUVFAgbGlzdGVuZXIgLSBhYm9ydGVkIik7CisgICAgICAgICAgICB9IGVs c2UgewogICAgICAgICAgICAgICAgIGZvcihzdmMgPSByZXMtPnNlcnZpY2VzOyBzdmMtPm5l eHQ7IHN2YyA9IHN2Yy0+bmV4dCkKICAgICAgICAgICAgICAgICAgICAgOwogICAgICAgICAg ICAgICAgIHN2Yy0+bmV4dCA9IHBhcnNlX3NlcnZpY2UoTlVMTCk7CisgICAgICAgICAgICAg ICAgaWYoc3ZjLT5uZXh0LT5zdHMgPj0gMCkKKyAgICAgICAgICAgICAgICAgICAgY29uZl9l cnIoIlN0cmljdFRyYW5zcG9ydFNlY3VyaXR5IG5vdCBhbGxvd2VkIGluIEhUVFAgbGlzdGVu ZXIgLSBhYm9ydGVkIik7CiAgICAgICAgICAgICB9CiAgICAgICAgIH0gZWxzZSBpZighcmVn ZXhlYygmU2VydmljZU5hbWUsIGxpbiwgNCwgbWF0Y2hlcywgMCkpIHsKICAgICAgICAgICAg IGxpblttYXRjaGVzWzFdLnJtX2VvXSA9ICdcMCc7CkBAIC0xNDYxLDYgKzE0NjgsNyBAQAog ICAgIHx8IHJlZ2NvbXAoJlNlcnZpY2UsICJeWyBcdF0qU2VydmljZVsgXHRdKiQiLCBSRUdf SUNBU0UgfCBSRUdfTkVXTElORSB8IFJFR19FWFRFTkRFRCkKICAgICB8fCByZWdjb21wKCZT ZXJ2aWNlTmFtZSwgIl5bIFx0XSpTZXJ2aWNlWyBcdF0rXCIoLispXCJbIFx0XSokIiwgUkVH X0lDQVNFIHwgUkVHX05FV0xJTkUgfCBSRUdfRVhURU5ERUQpCiAgICAgfHwgcmVnY29tcCgm VVJMLCAiXlsgXHRdKlVSTFsgXHRdK1wiKC4rKVwiWyBcdF0qJCIsIFJFR19JQ0FTRSB8IFJF R19ORVdMSU5FIHwgUkVHX0VYVEVOREVEKQorICAgIHx8IHJlZ2NvbXAoJlN0cmljdFRyYW5z cG9ydFNlY3VyaXR5LCAiXlsgXHRdKlN0cmljdFRyYW5zcG9ydFNlY3VyaXR5WyBcdF0rKFsw LTldKylbIFx0XSokIiwgUkVHX0lDQVNFIHwgUkVHX05FV0xJTkUgfCBSRUdfRVhURU5ERUQp CiAgICAgfHwgcmVnY29tcCgmSGVhZFJlcXVpcmUsICJeWyBcdF0qSGVhZFJlcXVpcmVbIFx0 XStcIiguKylcIlsgXHRdKiQiLCBSRUdfSUNBU0UgfCBSRUdfTkVXTElORSB8IFJFR19FWFRF TkRFRCkKICAgICB8fCByZWdjb21wKCZIZWFkRGVueSwgIl5bIFx0XSpIZWFkRGVueVsgXHRd K1wiKC4rKVwiWyBcdF0qJCIsIFJFR19JQ0FTRSB8IFJFR19ORVdMSU5FIHwgUkVHX0VYVEVO REVEKQogICAgIHx8IHJlZ2NvbXAoJkJhY2tFbmQsICJeWyBcdF0qQmFja0VuZFsgXHRdKiQi LCBSRUdfSUNBU0UgfCBSRUdfTkVXTElORSB8IFJFR19FWFRFTkRFRCkKQEAgLTE2MjYsNiAr MTYzNCw3IEBACiAgICAgcmVnZnJlZSgmU2VydmljZSk7CiAgICAgcmVnZnJlZSgmU2Vydmlj ZU5hbWUpOwogICAgIHJlZ2ZyZWUoJlVSTCk7CisgICAgcmVnZnJlZSgmU3RyaWN0VHJhbnNw b3J0U2VjdXJpdHkpOwogICAgIHJlZ2ZyZWUoJkhlYWRSZXF1aXJlKTsKICAgICByZWdmcmVl KCZIZWFkRGVueSk7CiAgICAgcmVnZnJlZSgmQmFja0VuZCk7CmRpZmYgLXVyIFBvdW5kLTIu OC5vcmlnL2h0dHAuYyBQb3VuZC0yLjgvaHR0cC5jCi0tLSBQb3VuZC0yLjgub3JpZy9odHRw LmMJMjAxOC0wNS0xMSAxMjoxNjowNS4wMDAwMDAwMDAgKzAyMDAKKysrIFBvdW5kLTIuOC9o dHRwLmMJMjAxOS0xMi0zMCAwODo1ODozNS40OTQ2ODI4MjUgKzAxMDAKQEAgLTE0MDMsNiAr MTQwMyw4IEBACiAgICAgICAgICAgICBpZighbm9fY29udCAmJiAhcmVnZXhlYygmUkVTUF9J R04sIHJlc3BvbnNlLCAwLCBOVUxMLCAwKSkKICAgICAgICAgICAgICAgICBub19jb250ID0g MTsKIAorICAgICAgICAgICAgZm9yKG4gPSAwOyBuIDwgTUFYSEVBREVSUzsgbisrKQorICAg ICAgICAgICAgICAgIGhlYWRlcnNfb2tbbl0gPSAxOwogICAgICAgICAgICAgZm9yKGNodW5r ZWQgPSAwLCBjb250ID0gLTFMLCBuID0gMTsgbiA8IE1BWEhFQURFUlMgJiYgaGVhZGVyc1tu XTsgbisrKSB7CiAgICAgICAgICAgICAgICAgc3dpdGNoKGNoZWNrX2hlYWRlcihoZWFkZXJz W25dLCBidWYpKSB7CiAgICAgICAgICAgICAgICAgY2FzZSBIRUFERVJfQ09OTkVDVElPTjoK QEAgLTE0NTMsNiArMTQ1NSwxMSBAQAogICAgICAgICAgICAgICAgICAgICAgICAgfQogICAg ICAgICAgICAgICAgICAgICB9CiAgICAgICAgICAgICAgICAgICAgIGJyZWFrOworICAgICAg ICAgICAgICAgIGNhc2UgSEVBREVSX1NUUklDVF9UUkFOU1BPUlRfU0VDVVJJVFk6CisgICAg ICAgICAgICAgICAgICAgIC8qIGVuZm9yY2UgcG91bmQncyBTVFMgaGVhZGVyICovCisgICAg ICAgICAgICAgICAgICAgIGlmKHN2Yy0+c3RzID49IDApCisgICAgICAgICAgICAgICAgICAg ICAgICBoZWFkZXJzX29rW25dID0gMDsKKyAgICAgICAgICAgICAgICAgICAgYnJlYWs7CiAg ICAgICAgICAgICAgICAgfQogICAgICAgICAgICAgfQogCkBAIC0xNDYyLDYgKzE0NjksOCBA QAogICAgICAgICAgICAgLyogc2VuZCB0aGUgcmVzcG9uc2UgKi8KICAgICAgICAgICAgIGlm KCFza2lwKQogICAgICAgICAgICAgICAgIGZvcihuID0gMDsgbiA8IE1BWEhFQURFUlMgJiYg aGVhZGVyc1tuXTsgbisrKSB7CisgICAgICAgICAgICAgICAgICAgIGlmKCFoZWFkZXJzX29r W25dKQorICAgICAgICAgICAgICAgICAgICAgICAgY29udGludWU7CiAgICAgICAgICAgICAg ICAgICAgIGlmKEJJT19wcmludGYoY2wsICIlc1xyXG4iLCBoZWFkZXJzW25dKSA8PSAwKSB7 CiAgICAgICAgICAgICAgICAgICAgICAgICBpZihlcnJubykgewogICAgICAgICAgICAgICAg ICAgICAgICAgICAgIGFkZHIyc3RyKGNhZGRyLCBNQVhCVUYgLSAxLCAmZnJvbV9ob3N0LCAx KTsKQEAgLTE0NzMsNiArMTQ4Miw4IEBACiAgICAgICAgICAgICAgICAgICAgIH0KICAgICAg ICAgICAgICAgICB9CiAgICAgICAgICAgICBmcmVlX2hlYWRlcnMoaGVhZGVycyk7CisgICAg ICAgICAgICBpZighc2tpcCAmJiBzc2wgJiYgc3ZjLT5zdHMgPj0gMCkKKyAgICAgICAgICAg ICAgICBCSU9fcHJpbnRmKGNsLCAiU3RyaWN0LVRyYW5zcG9ydC1TZWN1cml0eTogbWF4LWFn ZT0lZFxyXG4iLCBzdmMtPnN0cyk7CiAKICAgICAgICAgICAgIC8qIGZpbmFsIENSTEYgKi8K ICAgICAgICAgICAgIGlmKCFza2lwKQpkaWZmIC11ciBQb3VuZC0yLjgub3JpZy9wb3VuZC5o IFBvdW5kLTIuOC9wb3VuZC5oCi0tLSBQb3VuZC0yLjgub3JpZy9wb3VuZC5oCTIwMTgtMDUt MTEgMTI6MTY6MDUuMDAwMDAwMDAwICswMjAwCisrKyBQb3VuZC0yLjgvcG91bmQuaAkyMDE5 LTEyLTMwIDA4OjU4OjM1LjQ5NDY4MjgyNSArMDEwMApAQCAtMzY5LDYgKzM2OSw3IEBACiAg ICAgTEhBU0ggICAgICAgICAgICAgICAqc2Vzc2lvbnM7ICAvKiBjdXJyZW50bHkgYWN0aXZl IHNlc3Npb25zICovCiAjZW5kaWYKICAgICBpbnQgICAgICAgICAgICAgICAgIGRpc2FibGVk OyAgIC8qIHRydWUgaWYgdGhlIHNlcnZpY2UgaXMgZGlzYWJsZWQgKi8KKyAgICBpbnQgICAg ICAgICAgICAgICAgIHN0czsgICAgICAgIC8qIHN0cmljdCB0cmFuc3BvcnQgc2VjdXJpdHkg Ki8KICAgICBzdHJ1Y3QgX3NlcnZpY2UgICAgICpuZXh0OwogfSAgIFNFUlZJQ0U7CiAKQEAg LTQ0MCw2ICs0NDEsNyBAQAogI2RlZmluZSBIRUFERVJfVVJJICAgICAgICAgICAgICAgICAg OQogI2RlZmluZSBIRUFERVJfREVTVElOQVRJT04gICAgICAgICAgMTAKICNkZWZpbmUgSEVB REVSX0VYUEVDVCAgICAgICAgICAgICAgIDExCisjZGVmaW5lIEhFQURFUl9TVFJJQ1RfVFJB TlNQT1JUX1NFQ1VSSVRZIDEyCiAKIC8qIGNvbnRyb2wgcmVxdWVzdCBzdHVmZiAqLwogdHlw ZWRlZiBlbnVtICAgIHsKZGlmZiAtdXIgUG91bmQtMi44Lm9yaWcvc3ZjLmMgUG91bmQtMi44 L3N2Yy5jCi0tLSBQb3VuZC0yLjgub3JpZy9zdmMuYwkyMDE4LTA1LTExIDEyOjE2OjA1LjAw MDAwMDAwMCArMDIwMAorKysgUG91bmQtMi44L3N2Yy5jCTIwMTktMTItMzAgMDg6NTg6MzUu NDk0NjgyODI1ICswMTAwCkBAIC0zOTUsNiArMzk1LDcgQEAKICAgICAgICAgeyAiVXNlci1h Z2VudCIsICAgICAgICAgMTAsIEhFQURFUl9VU0VSX0FHRU5UIH0sCiAgICAgICAgIHsgIkRl c3RpbmF0aW9uIiwgICAgICAgIDExLCBIRUFERVJfREVTVElOQVRJT04gfSwKICAgICAgICAg eyAiRXhwZWN0IiwgICAgICAgICAgICAgNiwgIEhFQURFUl9FWFBFQ1QgfSwKKyAgICAgICAg eyAiU3RyaWN0LVRyYW5zcG9ydC1TZWN1cml0eSIsIDI1LCBIRUFERVJfU1RSSUNUX1RSQU5T UE9SVF9TRUNVUklUWSB9LAogICAgICAgICB7ICIiLCAgICAgICAgICAgICAgICAgICAwLCAg SEVBREVSX09USEVSIH0sCiAgICAgfTsKICAgICBpbnQgaTsK ------=_=-_OpenGroupware_org_NGMime-43-1577693589.727737-1------ Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- pound mailing list [email protected] https://admin.hostpoint.ch/mailman/listinfo/pound_apsis.ch ------=_=-_OpenGroupware_org_NGMime-43-1577693589.727737-1--------