You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2013/07/29 05:08:36 UTC

[Bug 55320] New: Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

            Bug ID: 55320
           Summary: Plain-text request is sent to WSS URL (which should be
                    over SSL) in mod_proxy_wstunnel
           Product: Apache httpd-2
           Version: 2.4.6
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: mod_proxy
          Assignee: bugs@httpd.apache.org
          Reporter: alex.leo.ca@gmail.com

When I configure ws_proxy_wstunnel module with wss:// URL the request is
actually sent in plaintext which gets rejected by backend server due to SSL
handshake failure.

Suggested correction,
314a315
>     int is_ssl = 0;
320a322
>         is_ssl = 1;
344c346
<     backend->is_ssl = 0;
---
>     backend->is_ssl = is_ssl;

Thanks,

Alex

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

--- Comment #5 from Eric Covener <co...@gmail.com> ---
Looking now, I must have misread

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |FixedInTrunk
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Eric Covener <co...@gmail.com> ---
Thanks for the report, equivalent patch seems to be applied in trunk and 2.4.x.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

--- Comment #7 from Yann Ylavic <yl...@gmail.com> ---
Backported in upcoming 2.4.10.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

--- Comment #6 from Yann Ylavic <yl...@gmail.com> ---
Commited in trunk with r1594625.
Proposed for backport in 2.4.x.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|---                         |FIXED

--- Comment #8 from Christophe JAILLET <ch...@wanadoo.fr> ---
Fixed and released in 2.4.10

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

Alex Liu <al...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |alex.leo.ca@gmail.com

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

--- Comment #1 from Jason Hoos <ja...@sap.com> ---
Created attachment 31035
  --> https://issues.apache.org/bugzilla/attachment.cgi?id=31035&action=edit
Patch for mod_proxy_wstunnel.c

I ran into this issue today.  To assist others, I'm attaching a patch file with
Alex's fix.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

Anton Shtikhlaytner <an...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |antonsh@gmail.com

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

schulz@image-systems.biz changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |schulz@image-systems.biz

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

Yann Ylavic <yl...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|FIXED                       |---

--- Comment #4 from Yann Ylavic <yl...@gmail.com> ---
This does not seem to be fixed (Bug 56515), at least I can't find the
corresponding code. Eric?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

Christophe JAILLET <ch...@wanadoo.fr> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |PatchAvailable

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 55320] Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=55320

Yann Ylavic <yl...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |andre.wendel@bmw.de

--- Comment #3 from Yann Ylavic <yl...@gmail.com> ---
*** Bug 56515 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org