[stunnel-users] Rewriting HTTP host header

[Michal Trojnara]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 19.04.2015 09:54, Veit Guna wrote:
> So I ask again, is it possible that stunnel could set the HTTP
> Host header to match the "connect = " setting? This way, Apache
> would accept that request instead of returning BAD REQUEST with
> AH02032.

Do I guess correctly that you have configured a stunnel client
("client = yes") to connect an SSL-enabled Apache server?
An accurate description of your configuration, including stunnel.conf,
would really help to diagnose your issue.  Also, presenting *your*
solution, instead of the problem you're trying to solve, does not
really help.  See: http://www.chiark.greenend.org.uk/~sgtatham/bugs.html
"I think the tachyon modulation must be wrongly polarised."

AH02032 suggest that you need to set your SNI to match your "Host:"
header.  See: https://www.stunnel.org/static/stunnel.html

Mike
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=5tEM
-----END PGP SIGNATURE-----