[Bug 55892] ProxyRemote with HTTPS backend sends requests with absoluteURI instead of abs_path

[bu...@apache.org]

https://bz.apache.org/bugzilla/show_bug.cgi?id=55892

--- Comment #4 from William A. Rowe Jr. <wr...@apache.org> ---
This assessment is correct.  http://tools.ietf.org/html/rfc7230#section-5.3 is
controlling.  Reviewing your proposed patch.

Scenario;

outward.example.com
 - Gateway, reverse proxy
 - ProxyRemote http://{targetServer} http://proxy1.example.com
 - ProxyRemote https://{targetServer} http://proxy1.example.com
 - ProxyPass /foo http://{targetServer}/foo
 - ProxyPass /bar https://{targetServer}/bar

proxy1.example.com
 - At DMZ, faces outward.example.com and behind firewall
 - http:// request seen as proxy GET http://targetServer/foo/ absolute-form
 - https:// request seen as proxy CONNECT targetServer authority-form

targetServer
 - for http from proxy1.example.com, proxy1 has truncated URI to origin-form
/foo
 - for https from outward.example.com through proxy1 tunnel, outward failed
   to truncate URI from https://targetServer/bar/ absolute-form to origin-form 
   of simply /bar/ (outward is a tunnel, it has no visibility into the tunneled 
   SSL stream's contents).

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org