Forum OpenACS Improvement Proposals (TIPs): Re: TIP #114: Proxy support

Collapse
Posted by Malte Sussdorff on
Modifications to the TIP which I think are fine as well.

a) Use an acs-kernel parameter instead of the ns/parameters
b) Use X-SSL-Request header (which is set to 1 if it is SSL) instead of X-FORWARDED_PROTO (which is set to HTTP or HTTPS dependent on the request, but not in use by POUND).

Here is the code snippet from http://jamesthornton.com/writing/openacs-pound.html describing how this is to be done.

if {[string equal [ns_set get [ns_conn headers] "X-SSL-Request"] 1]} {
return 1
} else {
return [string match "https:*" [util_current_location]]
}