To be precise there is a SNI extension to the SSL protocol, that allows selection of the virtual host during negotiation, but it still not(?) widely used. At least, I wouldn't suspect LWP in that :)
Well, "virtualhost" wouldn't help anything, as it's part of HTTP protocol and SSL check happens one(half:)) layer below - during the TCP connection negotiation. At that point only DNS name of the rea
Yeah the LWP is 6.0.5, but it's working now as intended, probably is Crypt-SSLeay working then. But then again, my setup is working now, and I suspect the virtualhost clause helped, since the SSL I h
Not sure, how all that mix of SSL modules would work together, but if Crypt-SSLeay-0.64-Pc0dMJ took preference then host checks effectively were disabled: NET::HTTPS states in the code: if ($cnf->{SS
That's were I ended up, but mostly due the use of IPv6. And, using curl for checks I still need to specify -g to omit host verification for SSL. With regards, Timur. _________________________________
Nice you also use it, Malcolm! But for the inexperienced user it's kind of frustrating when working configuration stops working after the upgrade. That's why I'd like this fix to be in the main sourc
I just always use an external check for HTTP(S) these days anyway. Much more flexibility that way. _______________________________________________ Please read the documentation before posting - it's
For me to make this work on my setup I had to install some Perl Modules, if you use Ldirectord -d to debug you will see a internal error on messages checking SSL My config that works now: virtual = <
We use the same patch at Loadbalancer.org (or something very similar anyway). Most of our customers specifically do not want use a virtual host (for a health check) OR care if the SSL cert is valid.
Have you tried it, Dennis? Did you look into the ldirectord code? You know, how SSL is working? Regards, Timur. On Wed, Dec 4, 2013 at 6:09 AM, Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx __________
Author: Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx>
Date: Wed, 04 Dec 2013 06:09:25 +0100
I don't think that's a bug but you have to specify the virtualhost parameter to set the Host header for the realservers. Regards, Dennis _______________________________________________ Please read th
Hi guys! I've posted bug report regarding ldirectord, can you please review it and commit, if possible? https://github.com/ClusterLabs/resource-agents/issues/361 Ldirectord is using LWP for it's nego