Requiring an SSL Certificate for Parts of an Application and HTTP::header insert..

I had the HTTP::redirect in mind, but I think it can be little

 

dangerous as it is not guaranteed that the client would re-use the

 

SSL session.

 

 

The HTTP::redirect loop could be avoided by adding some artificial request parameter to indicate that this 'ssl-renegotiate-workaround=1' BUT as the

 

original HTTP request method for /needcert might be a POST its starting to

 

get nasty if we need to include those POST http-request paramaters into the same HTTP::redirect 'Location: ' headers as well..