AW: Apache Proxy on SSL enabled server CONNECT hangs

AW: Apache Proxy on SSL enabled server CONNECT hangs

am 08.06.2005 17:06:10 von Fitzner Daniel

Look at this http://issues.apache.org/bugzilla/show_bug.cgi?id=3D19188

Best regards

> -----Ursprüngliche Nachricht-----
> Von: Emmanuel E [mailto:emmanuel.e@gmx.net]=20
> Gesendet: Mittwoch, 8. Juni 2005 16:47
> An: modssl-users@modssl.org
> Betreff: Apache Proxy on SSL enabled server CONNECT hangs
>=20
>=20
> Sorry for the repost but there is a bug report also open at=20
> http://issues.apache.org/bugzilla/show_bug.cgi?id=3D11232
> The bug id is 11232.
>=20
> Hi,
>=20
> I have the following setup of Apache on Win 32.
>=20
> Apache running only on port 443 with SSL enabled and proxying=20
> enabled.=20
>=20
> I am using the precompiled binaries available at=20
> http://www.apache.org/dyn/closer.cgi/perl/win3> 2-bin/
>=20
> The=20
> normal usage is like this:
>=20
> web client <-https=20
> connection to proxy-> Apache Proxy on port 443 <-normal=20
> processing of proxy request-> Remote web server.
>=20
> The connection between the web client and the proxy is https=20
> or ssl encrypted. The connection between the proxy and the=20
> remote web server may or may not be.
>=20
> This setup works fine as long as the client issues only GET=20
> and POST requests. But when the client issues a CONNECT=20
> request (to reach a secure remote web server via the secure=20
> proxy) the proxy server abruptly drops the connection after a=20
> few seconds.
>=20
> Without an SSL connection between the client and the proxy=20
> CONNECT works fine.
>=20
> The problem exists both on the latest version of apache 1.3=20
> and 2.0. I have tested them on a winxp box.
>=20
> Possibly mod_ssl on win32 is not able to handle streams of=20
> unknown length properly?
>=20
> Is it possible to have a stable port of OpenSSL/mod_ssl on win32 :( ?
>=20
> Regards,
> Emmanuel
>=20
> --=20
> Geschenkt: 3 Monate GMX ProMail gratis + 3 Ausgaben stern gratis
> ++ Jetzt anmelden & testen ++ http://www.gmx.net/de/go/promail ++
>=20
> --=20
> Weitersagen: GMX DSL-Flatrates mit Tempo-Garantie!
> Ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl=20
> =
____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) =
www.modssl.org
> User Support Mailing List =
modssl-users@modssl.org
> Automated List Manager =
majordomo@modssl.org
>=20
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: AW: Apache Proxy on SSL enabled server CONNECT hangs

am 08.06.2005 17:24:50 von Emmanuel E

I looked at that. That seems to be an issue with mod_proxy_connect.

This issue turns up only if the proxy is running on the ssl enabled serve=
r
on the ssl enabled port.

Its a problem with mod_ssl more than anything else.

> --- Ursprüngliche Nachricht ---
> Von: Fitzner Daniel
> An: "'modssl-users@modssl.org'"
> Kopie: "'emmanuel.e@gmx.net'"
> Betreff: AW: Apache Proxy on SSL enabled server CONNECT hangs
> Datum: Wed, 8 Jun 2005 17:06:10 +0200
>=20
> Look at this http://issues.apache.org/bugzilla/show_bug.cgi?id=3D19188
>=20
> Best regards
>=20
> > -----Ursprüngliche Nachricht-----
> > Von: Emmanuel E [mailto:emmanuel.e@gmx.net]=20
> > Gesendet: Mittwoch, 8. Juni 2005 16:47
> > An: modssl-users@modssl.org
> > Betreff: Apache Proxy on SSL enabled server CONNECT hangs
> >=20
> >=20
> > Sorry for the repost but there is a bug report also open at=20
> > http://issues.apache.org/bugzilla/show_bug.cgi?id=3D11232
> > The bug id is 11232.
> >=20
> > Hi,
> >=20
> > I have the following setup of Apache on Win 32.
> >=20
> > Apache running only on port 443 with SSL enabled and proxying=20
> > enabled.=20
> >=20
> > I am using the precompiled binaries available at=20
> > http://www.apache.org/dyn/closer.cgi/perl/win3> 2-bin/
> >=20
> > The=20
> > normal usage is like this:
> >=20
> > web client <-https=20
> > connection to proxy-> Apache Proxy on port 443 <-normal=20
> > processing of proxy request-> Remote web server.
> >=20
> > The connection between the web client and the proxy is https=20
> > or ssl encrypted. The connection between the proxy and the=20
> > remote web server may or may not be.
> >=20
> > This setup works fine as long as the client issues only GET=20
> > and POST requests. But when the client issues a CONNECT=20
> > request (to reach a secure remote web server via the secure=20
> > proxy) the proxy server abruptly drops the connection after a=20
> > few seconds.
> >=20
> > Without an SSL connection between the client and the proxy=20
> > CONNECT works fine.
> >=20
> > The problem exists both on the latest version of apache 1.3=20
> > and 2.0. I have tested them on a winxp box.
> >=20
> > Possibly mod_ssl on win32 is not able to handle streams of=20
> > unknown length properly?
> >=20
> > Is it possible to have a stable port of OpenSSL/mod_ssl on win32 :( ?
> >=20
> > Regards,
> > Emmanuel
> >=20
> > --=20
> > Geschenkt: 3 Monate GMX ProMail gratis + 3 Ausgaben stern gratis
> > ++ Jetzt anmelden & testen ++ http://www.gmx.net/de/go/promail ++
> >=20
> > --=20
> > Weitersagen: GMX DSL-Flatrates mit Tempo-Garantie!
> > Ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl=20
> > ____________________________________________________________ _________=
_
> > Apache Interface to OpenSSL (mod_ssl) www.modssl.or=
g
> > User Support Mailing List modssl-users@modssl.or=
g
> > Automated List Manager majordomo@modssl.or=
g
> >=20
>=20

--=20
Geschenkt: 3 Monate GMX ProMail gratis + 3 Ausgaben stern gratis
++ Jetzt anmelden & testen ++ http://www.gmx.net/de/go/promail ++
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org