Page 1 of 1
How to add custom HTTP headers?
Posted: Mon Sep 13, 2021 5:33 pm
by xgantan
We are running an OpenVPN Access Server on AWS EC2. We'd like to add custom HTTP headers to all the HTTP endpoints such as `GET vpn.example.com`. Where is the configuration for adding custom HTTP headers to the Access Server?
Re: How to add custom HTTP headers?
Posted: Mon Sep 13, 2021 7:45 pm
by openvpn_inc
Re: How to add custom HTTP headers?
Posted: Mon Sep 13, 2021 8:16 pm
by xgantan
Thanks for the response.
As a related but separate issue, we also would like to configure openvpn to ignore certain HTTP headers sent by the clients such as `Host`. For example, if an attacker sends a `GET /__session_start__/ HTTP/1.1` with a request header `Host: bing.com`, openvpn will respond with a response header `Host: bing.com`. How to configure openvpn so it ignores such headers?
Re: How to add custom HTTP headers?
Posted: Mon Sep 13, 2021 10:30 pm
by openvpn_inc
Hello xgantan,
That is currently not possible to configure. If you wish to make a case for this feature, please do so at
https://openvpn.net/support with an explanation as to why this feature would be necessary.
Kind regards,
Johan