/ Zope / Apsis / Pound Mailing List / Archive / 2008 / 2008-03 / HTTPSHeaders option?

[ << ] [ >> ]

[ Problem upgrading from 2.3.2 to 2.4 on older ... ] [ Re: [Pound Mailing List] Problems with Pound 2.4 ... ]

HTTPSHeaders option?
Tom Fernandes <anyaddress(at)gmx.net>
2008-03-27 17:25:29 [ FULL ]
Hello,

The FAQ states:

4.4 How can a back-end know that the connection is via HTTPS?

    Pound can add a header for incoming requests indicating that they were
    received via HTTPS. See the details on HTTPSHeaders in the man page.


but the manpage doesn't contain anything about HTTPSHeaders. I'm not sure what 
version of pound I would need for that. We are currently using version 
2.0-1.2. I also checked the manpage of 2.2.7 and 2.4 and searched for 
HTTPSHeaders within it but couldn't find anything.

Our backend needs to know if the received connection was done via HTTPS - how 
can we do this (preferably in version 2.0-1.2)?


thanks,


Tom

RE: [Pound Mailing List] HTTPSHeaders option?
"Alfonso Espitia" <aespitia(at)castleworldwide.com>
2008-03-27 17:38:56 [ FULL ]
I'm currently using 2.4, I ended up having to pass a "Front-End-Https:
on" header from ListenHTTPS, for consistency I added "Front-End-Https:
off" on ListenHTTP.  

In my code I look for the custom header.  It is odd though, that in
older versions Pound used to pass along the request as
www.domain.com:443, and then you used to be able to check if your
request was formatted with the right port attached, now it passes both
www.domain.com:443 and www.domain.com:80 as www.domain.com . 

I never saw this change mentioned in the change logs.

--Alfonso 

-----Original Message-----
From: Tom Fernandes [mailto:anyaddress(at)gmx.net] 
Sent: Thursday, March 27, 2008 12:25 PM
To: pound(at)apsis.ch
Subject: [Pound Mailing List] HTTPSHeaders option?

Hello,

The FAQ states:

4.4 How can a back-end know that the connection is via HTTPS?

    Pound can add a header for incoming requests indicating that they
were
    received via HTTPS. See the details on HTTPSHeaders in the man page.


but the manpage doesn't contain anything about HTTPSHeaders. I'm not
sure what version of pound I would need for that. We are currently using
version 2.0-1.2. I also checked the manpage of 2.2.7 and 2.4 and
searched for HTTPSHeaders within it but couldn't find anything.

Our backend needs to know if the received connection was done via HTTPS
- how can we do this (preferably in version 2.0-1.2)?


thanks,


Tom

--
To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
Please contact roseg(at)apsis.ch for questions.
[...]

Re: [Pound Mailing List] HTTPSHeaders option?
Dave Steinberg <dave(at)redterror.net>
2008-03-27 17:40:01 [ FULL ]
On Mar 27, 2008, at 12:25 PM, Tom Fernandes wrote:[...]

I think that's an error in the FAQ.  Just use the AddHeader  
directive, like so:

AddHeader "X-Forwarded-Proto: https"

Be sure to strip the X-Forwarded-Proto header on plain http requests,  
so nothing funny can happen.

Regards,[...]

MailBoxer