You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by rb...@apache.org on 2026/04/29 18:44:33 UTC
svn commit: r1933523 - httpd/httpd/branches/2.4.x/docs/manual/mod
Author: rbowen
Date: Wed Apr 29 18:44:33 2026
New Revision: 1933523
Log:
mod_proxy: Add note about HTTPS/CONNECT access control in forward proxy docs (Bug 54653)
Modified:
httpd/httpd/branches/2.4.x/docs/manual/mod/mod_proxy.xml
Modified: httpd/httpd/branches/2.4.x/docs/manual/mod/mod_proxy.xml
==============================================================================
--- httpd/httpd/branches/2.4.x/docs/manual/mod/mod_proxy.xml Wed Apr 29 18:44:30 2026 (r1933522)
+++ httpd/httpd/branches/2.4.x/docs/manual/mod/mod_proxy.xml Wed Apr 29 18:44:33 2026 (r1933523)
@@ -336,6 +336,14 @@ ProxyPass "/examples" "http://backend.ex
</Proxy>
</highlight>
+ <note><title>HTTPS/CONNECT requests</title>
+ <p>The <code><Proxy "*"></code> wildcard above matches all
+ requests, including HTTPS requests tunneled via the CONNECT method.
+ Note that access control for CONNECT tunnels can only match against
+ the host and port — path-based matching (e.g.,
+ <code><Proxy "https://example.com/path/"></code>) does not
+ work because CONNECT requests do not contain a path.</p></note>
+
<p>For more information on access control directives, see
<module>mod_authz_host</module>.</p>