Feature #35723
closed
Improvement for SSL detection behind proxy server
Added by Michael Klapper over 12 years ago.
Updated over 11 years ago.
Description
In some Proy environments is only the environment variable "HTTP_FRONT_END_HTTPS" set to "On" and the other variables like "SSL_SESSION_ID", "HTTPS" are missing.
So i suggest to support the variable "HTTP_FRONT_END_HTTPS" to detect SSL connections.
- Status changed from New to Under Review
Is abandoned in Gerrit. Don't know if Tolleiv's suggestion is still valid.
- Tracker changed from Bug to Feature
- Status changed from Under Review to Needs Feedback
- Priority changed from Should have to Could have
As concluded in the now abandonned review session, relying on variables that could be forged by the client is not ideal.
Tolleiv suggested to make the list of fields "configurable". How about a hook in t3lib_div::getIndpEnv to allow extensions to manipulate the return value of the settings "at will"? This provides more flexibility and doesn't require TYPO3-core to handle every Webserver configuration.
- Status changed from Needs Feedback to New
- Status changed from New to Closed
Closed this issue for now, a hook to getIntpEnv can be added with #39016
Also available in: Atom
PDF