httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 29744] - CONNECT does not work over existing SSL connection
Date Thu, 02 Mar 2006 17:58:24 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=29744>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=29744





------- Additional Comments From brad_boyer@symantec.com  2006-03-02 18:58 -------
(In reply to comment #11)
The bug is definitely still present in 2.0.55. I am testing on Linux, and I
suspect most of the others involved have been testing on something that uses the
unix build of httpd in one way or another.

However, I would be surprised if this is a platform specific bug, based on what
the real problem is (bug is in proxy_connect, not in mod_ssl). Are you sure you
understand the original test case? For my testing, I am using "openssl s_client
-connect 127.0.0.1:443" on the same machine running the server, and sending a
CONNECT request to the server through this SSL channel. The client errors out
with "15949:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version
number:s3_pkt.c:286:" when the proxy_connect module starts to send data because
proxy_connect is writing to the socket directly instead of going through the
filter stack. Because it skips the filter stack, the SSL module doesn't get
called and the data is sent in the clear.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message