You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Erwin Veugelers <Ve...@macewan.ca> on 2007/05/17 21:12:46 UTC

[users@httpd] mod_proxy_ajp with SSL front end: data corruption of POST request

Hi people,

We have a simple setup with a single Apache httpd-2.2.0 server with  
mod_proxy and related modules (ajp, http, etc), and a Tomcat 5.5.20  
app server running an HTTP connector on 8080 and an AJP connector on  
8009. The Apache server proxies into Tomcat using:

<IfModule mod_proxy.c>
	ProxyPass /webapp ajp://localhost:8009/webapp
	ProxyPassReverse /webapp ajp://localhost:8009/webapp
</IfModule>

This works fine except for the situation where a large chunk of data  
is POSTed to the webapp, while connecting to Apache over HTTPS. In  
this situation, the POSTed data is not recieved by Tomcat (although,  
for example, the Content-Length header of the request is, and is the  
proper value).

Please note:
- Problem does not occur when accessing the setup through non-secure  
HTTP.
- Problem does not occur when accessing Tomcat over port 8080.
- Problem DOES occur when using mod_jk instead of mod_proxy_ajp, and  
again, only over HTTPS.
- Problem does not occur when proxying into the HTTP connector:

<IfModule mod_proxy.c>
	ProxyPass /webapp http://localhost:8080/webapp
	ProxyPassReverse /webapp http://localhost:8080/webapp
</IfModule>

- Problem was also confirmed using httpd-2.2.4.

Some digging around in bugzilla found an eerily similar bug in  
mod_proxy_http, bug number 37415 (http://issues.apache.org/bugzilla/ 
show_bug.cgi?id=37145), that was fixed in httpd-2.0.56. Which might  
explain why the HTTP connection to Tomcat is working. Before I file a  
bug on this, could someone shed a light? Is this the same bug? Am I  
missing the obvious?

Thanks bundles!

	Erwin


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org