0

I've configured an Apache server for specifically serving client certificate authentication. Since it is being served from a different port (32443 outside, 8443 internally), I also set up CORS to handle preflight requests.

CORS by default doesn't send the client certificate as said in the spec but with this my configuration behaviour is weird.

If I try to use Limit in my Location block

<Limit OPTIONS>
  SSLVerifyClient none
</Limit>

then preflight requests work properly by returning 204. But then the main POST request fails to request a certificate even if SSLVerifyClient is set to require. It just completely bypasses and goes on to ProxyPass.

But if I try the opposite

<LimitExcept OPTIONS>
  SSLVerifyClient require
</LimitExcept>

and set the default to either none or optional, then it is trying to get the client certificate in the preflight request which is wrong again.

I've been reading about both Limit and LimitExcept from the docs as well as tried all the different ServerFault, SO and Google anwsers but it just doesn't work as it should.

If I test domain.tld:32443/1/auth/eid directly, then client certificate auth works fine.

As reference, here is the full VirtualHost configuration currently:

<VirtualHost *:8443>
  ServerName domain.tld

  SSLEngine on
#  SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.3
  SSLProtocol -all +TLSv1.2
  SSLCACertificateFile /certs/ca.crt
  SSLCertificateFile /certs/server.crt
  SSLCertificateKeyFile /certs/server.key

  <Location "/1/auth/eid">
    Header set Access-Control-Allow-Origin "https://domain.tld"
    Header set Access-Control-Allow-Methods "GET, PUT, POST, DELETE, PATCH, OPTIONS"
    Header set Access-Control-Allow-Credentials "true"
    Header set Access-Control-Max-Age "1000"
    Header set Access-Control-Allow-Headers "x-requested-with, Content-Type, origin, authorization, accept, client-security-token"

    <LimitExcept OPTIONS>
      SSLVerifyClient require
      SSLVerifyDepth 2
      SSLOptions +FakeBasicAuth +ExportCertData
      SSLRequire %{SSL_CLIENT_VERIFY} eq "SUCCESS"
    </LimitExcept>

    RequestHeader set SSL_CLIENT_S_DN "%{SSL_CLIENT_S_DN}s"
    RequestHeader set SSL_CLIENT_I_DN "%{SSL_CLIENT_I_DN}s"
    RequestHeader set SSL_SERVER_S_DN_OU "%{SSL_SERVER_S_DN_OU}s"
    RequestHeader set SSL_CLIENT_VERIFY "%{SSL_CLIENT_VERIFY}s"

    ProxyPass "http://api-gateway:3000/api/v1/1/auth/eid"
  </Location>
</VirtualHost>

Apache version - 2.4.41

OpenSSL version - 1.1.1d

Apache logs when trying over CORS from IE11:

[Thu Mar 26 12:54:54.852098 2020] [ssl:info] [pid 8:tid 139630609024768] [client 10.32.0.1:52935] AH01964: Connection to child 66 established (server domain.tld:443)
[Thu Mar 26 12:54:54.852144 2020] [ssl:info] [pid 91:tid 139630617417472] [client 10.32.0.1:52934] AH01964: Connection to child 193 established (server domain.tld:443)
[Thu Mar 26 12:54:54.852338 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_kernel.c(2128): [client 10.32.0.1:52935] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:54:54.852389 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_kernel.c(2128): [client 10.32.0.1:52935] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:54:54.852399 2020] [core:debug] [pid 8:tid 139630609024768] protocol.c(2249): [client 10.32.0.1:52935] AH03155: select protocol from , choices=h2,http/1.1 for server domain.tld
[Thu Mar 26 12:54:54.852719 2020] [ssl:debug] [pid 91:tid 139630617417472] ssl_engine_kernel.c(2128): [client 10.32.0.1:52934] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:54:54.852802 2020] [ssl:debug] [pid 91:tid 139630617417472] ssl_engine_kernel.c(2128): [client 10.32.0.1:52934] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:54:54.852813 2020] [core:debug] [pid 91:tid 139630617417472] protocol.c(2249): [client 10.32.0.1:52934] AH03155: select protocol from , choices=h2,http/1.1 for server domain.tld
[Thu Mar 26 12:54:54.863801 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_kernel.c(2058): [client 10.32.0.1:52935] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
[Thu Mar 26 12:54:54.863894 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_kernel.c(368): [client 10.32.0.1:52935] AH02034: Initial (No.1) HTTPS request received for child 66 (server domain.tld:443)
[Thu Mar 26 12:54:54.863935 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_kernel.c(748): [client 10.32.0.1:52935] AH02255: Changed client verification type will force renegotiation
[Thu Mar 26 12:54:54.863941 2020] [ssl:info] [pid 8:tid 139630609024768] [client 10.32.0.1:52935] AH02221: Requesting connection re-negotiation
[Thu Mar 26 12:54:54.863966 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_kernel.c(978): [client 10.32.0.1:52935] AH02260: Performing full renegotiation: complete handshake protocol (client does support secure renegotiation)
[Thu Mar 26 12:54:54.864031 2020] [ssl:info] [pid 8:tid 139630609024768] [client 10.32.0.1:52935] AH02226: Awaiting re-negotiation handshake
[Thu Mar 26 12:54:54.865626 2020] [ssl:debug] [pid 91:tid 139630617417472] ssl_engine_kernel.c(2058): [client 10.32.0.1:52934] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
[Thu Mar 26 12:54:54.869416 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_kernel.c(2128): [client 10.32.0.1:52935] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:54:54.879099 2020] [ssl:error] [pid 8:tid 139630609024768] [client 10.32.0.1:52935] AH02261: Re-negotiation handshake failed
[Thu Mar 26 12:54:54.879193 2020] [ssl:debug] [pid 8:tid 139630609024768] ssl_engine_io.c(1367): (70014)End of file found: [client 10.32.0.1:52935] AH02007: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!]
[Thu Mar 26 12:54:54.879227 2020] [ssl:info] [pid 8:tid 139630609024768] [client 10.32.0.1:52935] AH01998: Connection closed to child 66 with abortive shutdown (server domain.tld:443)
10.32.0.1 - - [26/Mar/2020:12:54:54 +0000] "OPTIONS /1/auth/eid HTTP/1.1" 403 219

Apache logs when trying over CORS from Firefox:

[Thu Mar 26 12:58:56.292011 2020] [socache_shmcb:debug] [pid 8:tid 139630519248640] mod_socache_shmcb.c(532): AH00835: socache_shmcb_retrieve (0x7d -> subcache 29)
[Thu Mar 26 12:58:56.292027 2020] [socache_shmcb:debug] [pid 8:tid 139630519248640] mod_socache_shmcb.c(917): AH00851: shmcb_subcache_retrieve found no match
[Thu Mar 26 12:58:56.292033 2020] [socache_shmcb:debug] [pid 8:tid 139630519248640] mod_socache_shmcb.c(542): AH00836: leaving socache_shmcb_retrieve successfully
[Thu Mar 26 12:58:56.292060 2020] [ssl:debug] [pid 8:tid 139630519248640] ssl_engine_kernel.c(2128): [client 10.32.0.1:52941] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:58:56.292095 2020] [ssl:debug] [pid 8:tid 139630519248640] ssl_engine_kernel.c(2128): [client 10.32.0.1:52941] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:58:56.292101 2020] [core:debug] [pid 8:tid 139630519248640] protocol.c(2249): [client 10.32.0.1:52941] AH03155: select protocol from , choices=h2,http/1.1 for server domain.tld
[Thu Mar 26 12:58:56.292394 2020] [ssl:info] [pid 8:tid 139630527641344] [client 10.32.0.1:52940] AH01964: Connection to child 67 established (server domain.tld:443)
[Thu Mar 26 12:58:56.292580 2020] [socache_shmcb:debug] [pid 8:tid 139630527641344] mod_socache_shmcb.c(532): AH00835: socache_shmcb_retrieve (0x7d -> subcache 29)
[Thu Mar 26 12:58:56.292589 2020] [socache_shmcb:debug] [pid 8:tid 139630527641344] mod_socache_shmcb.c(917): AH00851: shmcb_subcache_retrieve found no match
[Thu Mar 26 12:58:56.292594 2020] [socache_shmcb:debug] [pid 8:tid 139630527641344] mod_socache_shmcb.c(542): AH00836: leaving socache_shmcb_retrieve successfully
[Thu Mar 26 12:58:56.292617 2020] [ssl:debug] [pid 8:tid 139630527641344] ssl_engine_kernel.c(2128): [client 10.32.0.1:52940] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:58:56.292649 2020] [ssl:debug] [pid 8:tid 139630527641344] ssl_engine_kernel.c(2128): [client 10.32.0.1:52940] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:58:56.292656 2020] [core:debug] [pid 8:tid 139630527641344] protocol.c(2249): [client 10.32.0.1:52940] AH03155: select protocol from , choices=h2,http/1.1 for server domain.tld
[Thu Mar 26 12:58:56.690232 2020] [ssl:debug] [pid 8:tid 139630519248640] ssl_engine_kernel.c(2058): [client 10.32.0.1:52941] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
[Thu Mar 26 12:58:56.692264 2020] [ssl:debug] [pid 8:tid 139630519248640] ssl_engine_kernel.c(368): [client 10.32.0.1:52941] AH02034: Initial (No.1) HTTPS request received for child 68 (server domain.tld:443), referer: https://domain.tld/
[Thu Mar 26 12:58:56.692343 2020] [ssl:debug] [pid 8:tid 139630519248640] ssl_engine_kernel.c(748): [client 10.32.0.1:52941] AH02255: Changed client verification type will force renegotiation, referer: https://domain.tld/
[Thu Mar 26 12:58:56.692351 2020] [ssl:info] [pid 8:tid 139630519248640] [client 10.32.0.1:52941] AH02221: Requesting connection re-negotiation, referer: https://domain.tld/
[Thu Mar 26 12:58:56.692369 2020] [ssl:debug] [pid 8:tid 139630519248640] ssl_engine_kernel.c(978): [client 10.32.0.1:52941] AH02260: Performing full renegotiation: complete handshake protocol (client does support secure renegotiation), referer: https://domain.tld/
[Thu Mar 26 12:58:56.692438 2020] [ssl:info] [pid 8:tid 139630519248640] [client 10.32.0.1:52941] AH02226: Awaiting re-negotiation handshake, referer: https://domain.tld/
[Thu Mar 26 12:58:56.694707 2020] [ssl:debug] [pid 8:tid 139630527641344] ssl_engine_kernel.c(2058): [client 10.32.0.1:52940] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
[Thu Mar 26 12:58:56.695980 2020] [ssl:debug] [pid 8:tid 139630519248640] ssl_engine_kernel.c(2128): [client 10.32.0.1:52941] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 12:58:56.708782 2020] [ssl:error] [pid 8:tid 139630519248640] [client 10.32.0.1:52941] AH02261: Re-negotiation handshake failed, referer: https://domain.tld/
[Thu Mar 26 12:58:56.708857 2020] [ssl:error] [pid 8:tid 139630519248640] SSL Library Error: error:140890C7:SSL routines:ssl3_get_client_certificate:peer did not return a certificate -- No CAs known to server for verification?
10.32.0.1 - - [26/Mar/2020:12:58:56 +0000] "OPTIONS /1/auth/eid HTTP/1.1" 403 219
[Thu Mar 26 12:58:56.708940 2020] [ssl:info] [pid 8:tid 139630519248640] [client 10.32.0.1:52941] AH02008: SSL library error 1 in handshake (server domain.tld:443)
[Thu Mar 26 12:58:56.708963 2020] [ssl:info] [pid 8:tid 139630519248640] SSL Library Error: error:140A4044:SSL routines:SSL_clear:internal error
[Thu Mar 26 12:58:56.708986 2020] [ssl:info] [pid 8:tid 139630519248640] SSL Library Error: error:140800FF:SSL routines:ssl3_accept:unknown state
[Thu Mar 26 12:58:56.708993 2020] [ssl:info] [pid 8:tid 139630519248640] [client 10.32.0.1:52941] AH01998: Connection closed to child 68 with abortive shutdown (server domain.tld:443)

Apache logs when trying over CORS from Chrome (works because of Chromium bug regarding CORS Spec implementation):

[Thu Mar 26 13:01:06.729485 2020] [ssl:info] [pid 9:tid 139630625810176] [client 10.32.0.1:52976] AH01964: Connection to child 128 established (server domain.tld:443)
[Thu Mar 26 13:01:06.730082 2020] [socache_shmcb:debug] [pid 9:tid 139630625810176] mod_socache_shmcb.c(532): AH00835: socache_shmcb_retrieve (0xb2 -> subcache 18)
[Thu Mar 26 13:01:06.730099 2020] [socache_shmcb:debug] [pid 9:tid 139630625810176] mod_socache_shmcb.c(917): AH00851: shmcb_subcache_retrieve found no match
[Thu Mar 26 13:01:06.730106 2020] [socache_shmcb:debug] [pid 9:tid 139630625810176] mod_socache_shmcb.c(542): AH00836: leaving socache_shmcb_retrieve successfully
[Thu Mar 26 13:01:06.730159 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_kernel.c(2128): [client 10.32.0.1:52976] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 13:01:06.730236 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_kernel.c(2128): [client 10.32.0.1:52976] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 13:01:06.730245 2020] [core:debug] [pid 9:tid 139630625810176] protocol.c(2249): [client 10.32.0.1:52976] AH03155: select protocol from , choices=h2,http/1.1 for server domain.tld
[Thu Mar 26 13:01:06.741536 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_kernel.c(2058): [client 10.32.0.1:52976] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
[Thu Mar 26 13:01:06.741709 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_kernel.c(368): [client 10.32.0.1:52976] AH02034: Initial (No.1) HTTPS request received for child 128 (server domain.tld:443), referer: https://domain.tld/
[Thu Mar 26 13:01:06.741798 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_kernel.c(748): [client 10.32.0.1:52976] AH02255: Changed client verification type will force renegotiation, referer: https://domain.tld/
[Thu Mar 26 13:01:06.741808 2020] [ssl:info] [pid 9:tid 139630625810176] [client 10.32.0.1:52976] AH02221: Requesting connection re-negotiation, referer: https://domain.tld/
[Thu Mar 26 13:01:06.741838 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_kernel.c(978): [client 10.32.0.1:52976] AH02260: Performing full renegotiation: complete handshake protocol (client does support secure renegotiation), referer: https://domain.tld/
[Thu Mar 26 13:01:06.741913 2020] [ssl:info] [pid 9:tid 139630625810176] [client 10.32.0.1:52976] AH02226: Awaiting re-negotiation handshake, referer: https://domain.tld/
[Thu Mar 26 13:01:06.746085 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_kernel.c(2128): [client 10.32.0.1:52976] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 13:01:06.753685 2020] [ssl:error] [pid 9:tid 139630625810176] [client 10.32.0.1:52976] AH02261: Re-negotiation handshake failed, referer: https://domain.tld/
[Thu Mar 26 13:01:06.753815 2020] [ssl:debug] [pid 9:tid 139630625810176] ssl_engine_io.c(1367): (70014)End of file found: [client 10.32.0.1:52976] AH02007: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!]
[Thu Mar 26 13:01:06.753840 2020] [ssl:info] [pid 9:tid 139630625810176] [client 10.32.0.1:52976] AH01998: Connection closed to child 128 with abortive shutdown (server domain.tld:443)
10.32.0.1 - - [26/Mar/2020:13:01:06 +0000] "OPTIONS /1/auth/eid HTTP/1.1" 403 219
[Thu Mar 26 13:01:19.417933 2020] [ssl:info] [pid 9:tid 139630617417472] [client 10.32.0.1:52977] AH01964: Connection to child 129 established (server domain.tld:443)
[Thu Mar 26 13:01:19.418239 2020] [socache_shmcb:debug] [pid 9:tid 139630617417472] mod_socache_shmcb.c(532): AH00835: socache_shmcb_retrieve (0x14 -> subcache 20)
[Thu Mar 26 13:01:19.418256 2020] [socache_shmcb:debug] [pid 9:tid 139630617417472] mod_socache_shmcb.c(917): AH00851: shmcb_subcache_retrieve found no match
[Thu Mar 26 13:01:19.418260 2020] [socache_shmcb:debug] [pid 9:tid 139630617417472] mod_socache_shmcb.c(542): AH00836: leaving socache_shmcb_retrieve successfully
[Thu Mar 26 13:01:19.418287 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(2128): [client 10.32.0.1:52977] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 13:01:19.418638 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(2128): [client 10.32.0.1:52977] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 13:01:19.418648 2020] [core:debug] [pid 9:tid 139630617417472] protocol.c(2249): [client 10.32.0.1:52977] AH03155: select protocol from , choices=h2,http/1.1 for server domain.tld
[Thu Mar 26 13:01:19.429791 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(2058): [client 10.32.0.1:52977] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
[Thu Mar 26 13:01:19.431921 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(368): [client 10.32.0.1:52977] AH02034: Initial (No.1) HTTPS request received for child 129 (server domain.tld:443), referer: https://domain.tld/
[Thu Mar 26 13:01:19.431982 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(748): [client 10.32.0.1:52977] AH02255: Changed client verification type will force renegotiation, referer: https://domain.tld/
[Thu Mar 26 13:01:19.431991 2020] [ssl:info] [pid 9:tid 139630617417472] [client 10.32.0.1:52977] AH02221: Requesting connection re-negotiation, referer: https://domain.tld/
[Thu Mar 26 13:01:19.432011 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(978): [client 10.32.0.1:52977] AH02260: Performing full renegotiation: complete handshake protocol (client does support secure renegotiation), referer: https://domain.tld/
[Thu Mar 26 13:01:19.432098 2020] [ssl:info] [pid 9:tid 139630617417472] [client 10.32.0.1:52977] AH02226: Awaiting re-negotiation handshake, referer: https://domain.tld/
[Thu Mar 26 13:01:19.439968 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(2128): [client 10.32.0.1:52977] AH02043: SSL virtual host for servername domain.tld found
[Thu Mar 26 13:01:33.237199 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(1576): [client 10.32.0.1:52977] AH02275: Certificate Verification, depth 2, CRL checking mode: none (0) [subject: <redacted>]
[Thu Mar 26 13:01:33.237578 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(1576): [client 10.32.0.1:52977] AH02275: Certificate Verification, depth 1, CRL checking mode: none (0) [subject: <redacted>]
[Thu Mar 26 13:01:33.238129 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(1576): [client 10.32.0.1:52977] AH02275: Certificate Verification, depth 0, CRL checking mode: none (0) [subject: <redacted>]
[Thu Mar 26 13:01:33.241161 2020] [ssl:debug] [pid 9:tid 139630617417472] ssl_engine_kernel.c(2058): [client 10.32.0.1:52977] AH02041: Protocol: TLSv1.2, Cipher: ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
[Thu Mar 26 13:01:33.241218 2020] [authz_core:debug] [pid 9:tid 139630617417472] mod_authz_core.c(835): [client 10.32.0.1:52977] AH01628: authorization result: granted (no directives), referer: https://domain.tld/
[Thu Mar 26 13:01:33.241416 2020] [proxy:debug] [pid 9:tid 139630617417472] mod_proxy.c(1228): [client 10.32.0.1:52977] AH01143: Running scheme http handler (attempt 0), referer: https://domain.tld/
[Thu Mar 26 13:01:33.241457 2020] [proxy:debug] [pid 9:tid 139630617417472] proxy_util.c(2156): AH00942: HTTP: has acquired connection for (api-gateway)
[Thu Mar 26 13:01:33.241471 2020] [proxy:debug] [pid 9:tid 139630617417472] proxy_util.c(2209): [client 10.32.0.1:52977] AH00944: connecting http://api-gateway:3000/api/v1/1/auth/eid to api-gateway:3000, referer: https://domain.tld/
[Thu Mar 26 13:01:33.244404 2020] [proxy:debug] [pid 9:tid 139630617417472] proxy_util.c(2418): [client 10.32.0.1:52977] AH00947: connected /api/v1/1/auth/eid to api-gateway:3000, referer: https://domain.tld/
[Thu Mar 26 13:01:33.246262 2020] [proxy:debug] [pid 9:tid 139630617417472] proxy_util.c(2887): AH02824: HTTP: connection established with 10.108.253.212:3000 (api-gateway)
[Thu Mar 26 13:01:33.246332 2020] [proxy:debug] [pid 9:tid 139630617417472] proxy_util.c(3054): AH00962: HTTP: connection complete to 10.108.253.212:3000 (api-gateway)
[Thu Mar 26 13:01:33.248403 2020] [proxy:debug] [pid 9:tid 139630617417472] proxy_util.c(2171): AH00943: http: has released connection for (api-gateway)
10.32.0.1 - - [26/Mar/2020:13:01:19 +0000] "OPTIONS /1/auth/eid HTTP/1.1" 204 -
[Thu Mar 26 13:01:33.256439 2020] [ssl:debug] [pid 9:tid 139630609024768] ssl_engine_kernel.c(368): [client 10.32.0.1:52977] AH02034: Subsequent (No.2) HTTPS request received for child 130 (server domain.tld:443), referer: https://domain.tld/
[Thu Mar 26 13:01:33.256513 2020] [authz_core:debug] [pid 9:tid 139630609024768] mod_authz_core.c(835): [client 10.32.0.1:52977] AH01628: authorization result: granted (no directives), referer: https://domain.tld/
[Thu Mar 26 13:01:33.256609 2020] [proxy:debug] [pid 9:tid 139630609024768] mod_proxy.c(1228): [client 10.32.0.1:52977] AH01143: Running scheme http handler (attempt 0), referer: https://domain.tld/
[Thu Mar 26 13:01:33.256621 2020] [proxy:debug] [pid 9:tid 139630609024768] proxy_util.c(2156): AH00942: HTTP: has acquired connection for (api-gateway)
[Thu Mar 26 13:01:33.256626 2020] [proxy:debug] [pid 9:tid 139630609024768] proxy_util.c(2209): [client 10.32.0.1:52977] AH00944: connecting http://api-gateway:3000/api/v1/1/auth/eid to api-gateway:3000, referer: https://domain.tld/
[Thu Mar 26 13:01:33.256634 2020] [proxy:debug] [pid 9:tid 139630609024768] proxy_util.c(2418): [client 10.32.0.1:52977] AH00947: connected /api/v1/1/auth/eid to api-gateway:3000, referer: https://domain.tld/
[Thu Mar 26 13:01:33.311136 2020] [proxy:debug] [pid 9:tid 139630609024768] proxy_util.c(2171): AH00943: http: has released connection for (api-gateway)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.