You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2013/09/12 02:55:25 UTC

[Bug 29744] CONNECT does not work over existing SSL connection

https://issues.apache.org/bugzilla/show_bug.cgi?id=29744

--- Comment #141 from Nikolaus Rath <Ni...@rath.org> ---
Hmm. When I test the above patch, I'm getting a different result:

$ gnutls-cli www.rath.org
[...]
- Handshake was completed

- Simple Client Mode:

CONNECT www.web.de:80 HTTP/1.0
Host: www.rath.org

HTTP/1.1 400 Bad Request
Date: Thu, 12 Sep 2013 00:52:24 GMT
Vary: Accept-Encoding
Content-Length: 293
Connection: close
Content-Type: text/html; charset=iso-8859-1

And the server log says:

[Thu Sep 12 00:52:29 2013] [error] Hostname www.rath.org provided via SNI and
hostname www.web.de provided via HTTP are different

Has anyone else tried to use this with name based virtual TLS hosts? It looks
as if Apache is trying to match the SNI with the host specified in CONNECT,
rather than the one given in the host header.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org