Print Page - Modify httpd-ahssl.conf to Prevent non-https Custom Log Entries

Title: Modify httpd-ahssl.conf to Prevent non-https Custom Log Entries
Post by: mpfrench on December 17, 2015, 04:55:21 PM

The way httpd-ahssl.conf is shown now, it logs http as well as https connections. You should modify it to log only https connections since this is an SSL-only configuration file. This mod can be accomplished by adding the following to the end of the CustomLog configuration: expr=%{HTTPS}=="on"

Title: Re: Modify httpd-ahssl.conf to Prevent non-https Custom Log Entries
Post by: Gregg on December 17, 2015, 09:42:00 PM

Code Select

CustomLog "${SRVROOT}/logs/ssl_request.log" \
          "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b" env=HTTPS

Simple env=HTTPS should work also, I've made this change in httpd-ahssl.conf for 2.4.19.
Thanks for pointing this out.

The Apache Haus Forum

Forum Topics => Apache 2.4 => Topic started by: mpfrench on December 17, 2015, 04:55:21 PM