httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 42625] New: - mod_ssl does not support LimitRequestBody
Date Sun, 10 Jun 2007 01:00:53 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42625>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42625

           Summary: mod_ssl does not support LimitRequestBody
           Product: Apache httpd-2
           Version: 2.2-HEAD
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P2
         Component: mod_ssl
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: sergeyfd@gmail.com


Core Apache module provides LimitRequestBody option to limit request body. 
That works well with HTTP protocol but doesn't work with HTTPS. That happens 
because mod_ssl does not support this option and instead has it's own hard 
coded limit. The limit is set to 128K in ssl_engine_io.c:

/* 128K maximum buffer size by default. */
#ifndef SSL_MAX_IO_BUFFER
#define SSL_MAX_IO_BUFFER (128 * 1024)
#endif

....

       /* Fail if this exceeds the maximum buffer size. */
        if (total > SSL_MAX_IO_BUFFER) {
            ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,
                          "request body exceeds maximum size for SSL buffer");
            return HTTP_REQUEST_ENTITY_TOO_LARGE;
        }

That leads to two problems:

1. Inability to submit POST requests bigger than 128K
2. Inability to lower that limit to something smaller than 128K

Ideal solution for this problem would implementing suport for LimitRequestBody 
in mod_ssl or providing an alternative SSLLimitRequestBody option.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message