You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by Pavel Mateja <pa...@netsafe.cz> on 2013/01/30 11:41:10 UTC

Re: [users@httpd] Proxy CONNECT HTTP version

> Hi!
> I have two debian servers - one squeeze and one wheezy - with different
> versions of wget - 1.12-2.1 and 1.13.4-3 and proxy server with apache
> 2.4.3. I'm trying to set https_proxy and wget some pages via https.
> Old wget is working just fine but the new one is reporting:
> "Proxy tunneling failed: Bad Request Unable to establish SSL connection."
> Wget debug output says there is one major difference. New wget is trying to
> do "CONNECT .. HTTP/1.1". The old working one uses just HTTP/1.0.
> Has anybody seen something similar?

Hi again.
I've checked the code and problem is with wget which sends HTTP/1.1 without 
Host header which is required by apache. Comment from server/protocol.c:
/*
 * Client sent us an HTTP/1.1 or later request without telling us the
 * hostname, either with a full URL or a Host: header. We therefore
 * need to (as per the 1.1 spec) send an error.  As a special case,
 * HTTP/1.1 mentions twice (S9, S14.23) that a request MUST contain
 * a Host: header, and the server MUST respond with 400 if it doesn't.
 */

The wget package will be in next stable debian which sux because all CONNECT 
requests thru apache will fail.

I just compiled wget from git (1.14.31-3be7) and the bug is still there.

Any idea what to do?
Should somebody fill bug for debian and wget or should we ignore that RFC 
request?
-- 
Pavel Mateja

Re: [users@httpd] Proxy CONNECT HTTP version

Posted by Pavel Mateja <pa...@netsafe.cz>.
> Hi Pavel,
> 
> On 01/30/2013 11:41 AM CEST +02:00, Pavel Mateja wrote:
> > The wget package will be in next stable debian which sux because all
> > CONNECT requests thru apache will fail.
> > 
> > I just compiled wget from git (1.14.31-3be7) and the bug is still there.
> > 
> > Any idea what to do?
> > Should somebody fill bug for debian and wget or should we ignore that RFC
> > request?
> 
> If wget fails to send a Host: header when RFC mandates it, I recommend
> you to file a bug against wget in the Debian bug tracker.
> 
> Regards,
> Micha

Hi,
I've alrady sent patch and it was accepted:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=699337
-- 
Pavel Mateja

Re: [users@httpd] Proxy CONNECT HTTP version

Posted by Micha Lenk <mi...@lenk.info>.
Hi Pavel,

On 01/30/2013 11:41 AM CEST +02:00, Pavel Mateja wrote:
> The wget package will be in next stable debian which sux because all CONNECT
> requests thru apache will fail.
>
> I just compiled wget from git (1.14.31-3be7) and the bug is still there.
>
> Any idea what to do?
> Should somebody fill bug for debian and wget or should we ignore that RFC
> request?

If wget fails to send a Host: header when RFC mandates it, I recommend 
you to file a bug against wget in the Debian bug tracker.

Regards,
Micha