Re: [mod-security-users] Variable that holds scheme

[Andrew H. <and...@lo...>]

Hi Ehsan,

> This question might look basic, but I could not find the variable that holds or contains the (http|https) scheme.

Where are you trying to pull the scheme from? The scheme isn't
typically* transmitted in an HTTP request.

A URL will usually be broken up into an HTTP request line and a Host
header, which usually looks something like:

    GET /docs/ HTTP/2
    Host: coreruleset.org

No scheme/protocol.

What are you trying to achieve? Are you trying to answer the question
"did this request come in as plain text HTTP or has TLS termination
been performed", and then treat the two cases differently?

Thanks,
Andrew


*You may find request lines containing a full 'absolute URI' which
includes the scheme, for example with a proxy server.
-- 

Andrew Howe
Loadbalancer.org Ltd.
www.loadbalancer.org
+1 888 867 9504 / +44 (0)330 380 1064