mod_proxy_ajp with SSL front end: data corruption of POST request

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi people,

We have a simple setup with a single Apache httpd-2.2.0 server with mod_proxy and related modules (ajp, http, etc), and a Tomcat 5.5.20 app server running an HTTP connector on 8080 and an AJP connector on 8009. The Apache server proxies into Tomcat using:

<IfModule mod_proxy.c>
	ProxyPass /webapp ajp://localhost:8009/webapp
	ProxyPassReverse /webapp ajp://localhost:8009/webapp
</IfModule>

This works fine except for the situation where a large chunk of data is POSTed to the webapp, while connecting to Apache over HTTPS. In this situation, the POSTed data is not recieved by Tomcat (although, for example, the Content-Length header of the request is, and is the proper value).

Please note:
- Problem does not occur when accessing the setup through non-secure HTTP.
- Problem does not occur when accessing Tomcat over port 8080.
- Problem DOES occur when using mod_jk instead of mod_proxy_ajp, and again, only over HTTPS.
- Problem does not occur when proxying into the HTTP connector:

<IfModule mod_proxy.c>
	ProxyPass /webapp http://localhost:8080/webapp
	ProxyPassReverse /webapp http://localhost:8080/webapp
</IfModule>

- Problem was also confirmed using httpd-2.2.4.

Some digging around in bugzilla found an eerily similar bug in mod_proxy_http, bug number 37415 (http://issues.apache.org/bugzilla/ show_bug.cgi?id=37145), that was fixed in httpd-2.0.56. Which might explain why the HTTP connection to Tomcat is working. Before I file a bug on this, could someone shed a light? Is this the same bug? Am I missing the obvious?

Thanks bundles!

	Erwin


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux