Override X-Forwarded-Proto header
authorJuan Antonio Osorio Robles <jaosorior@redhat.com>
Mon, 22 Feb 2016 13:09:05 +0000 (15:09 +0200)
committerJuan Antonio Osorio Robles <jaosorior@redhat.com>
Mon, 22 Feb 2016 13:26:54 +0000 (15:26 +0200)
commit5f915a88e7c4eec6e6a0341808f0fbc4a4b1a161
tree6f24fd2f26519e53b9c35c53f8db0bcc20716a57
parent94a1aefd6213180804db4c7da9de477e1cc51a31
Override X-Forwarded-Proto header

Right now, the only manipulation done to the X-Forwarded-Proto header
is done if an SSL connection is established. This is not sufficient as
one might be able to erroneously put values through that header.

This patch disables that behaviour by defaulting to plain http if an
SSL connection is not established.

Change-Id: I4bf6def21e21148834c2baa9669190bab8fa95ef
manifests/loadbalancer.pp