httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 40492] - Set-Cookie by origin server gets lost when an Apache proxy connects using SSL (mod_ssl)
Date Thu, 14 Sep 2006 13:03:22 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40492>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=40492





------- Additional Comments From ext-jukka.ukkonen@nokia.com  2006-09-14 13:03 -------

	OK - I will show you a snippet from the configuration file.
	Maybe you understand better then...

<Location "/CKM/" >
    RequestHeader unset Accept_Encoding

    ProxyPass   https://158.98.130.218/CKM/
    ProxyPassReverse https://158.98.130.218/CKM/
    ProxyPassReverse /CKM/

</Location>

	We go through whole HTTP protocol parsing catching certain
	path prefices which will then be forwarded to be handled by
	an external server for further processing.
	The apache instance is used as an authenticating proxy in
	the middle which also tunnels the request over a potentially
	hostile network using SSL connections.

	When the responses then are on their way back to the users
	the Set-Cookie headers are lost as long as the proxied
	connections shown above are made using SSL.
	If we drop the SSL changing the protocol in the ProxyPass
	statements to plain "http" the Set-Cookie headers travel
	through exactly as expected.



-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message