Bug 55320 - Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy_wstunnel
Summary: Plain-text request is sent to WSS URL (which should be over SSL) in mod_proxy...
Status: RESOLVED FIXED
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_proxy (show other bugs)
Version: 2.4.6
Hardware: All All
: P2 major with 7 votes (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords: FixedInTrunk, PatchAvailable
: 56515 (view as bug list)
Depends on:
Blocks:
 
Reported: 2013-07-29 03:08 UTC by Alex Liu
Modified: 2014-08-18 07:41 UTC (History)
4 users (show)


Attachments
Patch for mod_proxy_wstunnel.c (611 bytes, patch)
2013-11-11 22:01 UTC, Jason Hoos 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Alex Liu 2013-07-29 03:08:36 UTC 
When I configure ws_proxy_wstunnel module with wss:// URL the request is actually sent in plaintext which gets rejected by backend server due to SSL handshake failure.

Suggested correction,
314a315
>     int is_ssl = 0;
320a322
>         is_ssl = 1;
344c346
<     backend->is_ssl = 0;
---
>     backend->is_ssl = is_ssl;

Thanks,

Alex
Comment 1 Jason Hoos 2013-11-11 22:01:36 UTC 
Created attachment 31035 [details]
Patch for mod_proxy_wstunnel.c

I ran into this issue today.  To assist others, I'm attaching a patch file with Alex's fix.
Comment 2 Eric Covener 2014-04-13 17:01:33 UTC 
Thanks for the report, equivalent patch seems to be applied in trunk and 2.4.x.
Comment 3 Yann Ylavic 2014-05-14 14:38:38 UTC 
*** Bug 56515 has been marked as a duplicate of this bug. ***
Comment 4 Yann Ylavic 2014-05-14 14:41:46 UTC 
This does not seem to be fixed (Bug 56515), at least I can't find the corresponding code. Eric?
Comment 5 Eric Covener 2014-05-14 15:14:15 UTC 
Looking now, I must have misread
Comment 6 Yann Ylavic 2014-05-16 22:04:16 UTC 
Commited in trunk with r1594625.
Proposed for backport in 2.4.x.
Comment 7 Yann Ylavic 2014-06-06 06:32:14 UTC 
Backported in upcoming 2.4.10.
Comment 8 Christophe JAILLET 2014-08-18 07:41:02 UTC 
Fixed and released in 2.4.10