Return-Path: X-Original-To: apmail-httpd-users-archive@www.apache.org Delivered-To: apmail-httpd-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id E096F181E2 for ; Mon, 14 Mar 2016 12:10:08 +0000 (UTC) Received: (qmail 75490 invoked by uid 500); 14 Mar 2016 12:10:06 -0000 Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 75452 invoked by uid 500); 14 Mar 2016 12:10:06 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 75441 invoked by uid 99); 14 Mar 2016 12:10:06 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 14 Mar 2016 12:10:06 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id E94D21A00AD for ; Mon, 14 Mar 2016 12:10:05 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 0.37 X-Spam-Level: X-Spam-Status: No, score=0.37 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KAM_ASCII_DIVIDERS=0.8, RP_MATCHES_RCVD=-0.329, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd2-us-west.apache.org (amavisd-new); dkim=pass (1024-bit key) header.d=greenbytes.de header.b=EnXwO2qG; dkim=pass (1024-bit key) header.d=greenbytes.de header.b=qSZRZMA0 Received: from mx2-lw-us.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id 7LZaF-9lumqc for ; Mon, 14 Mar 2016 12:10:02 +0000 (UTC) Received: from mail.greenbytes.de (mail.greenbytes.de [5.10.171.186]) by mx2-lw-us.apache.org (ASF Mail Server at mx2-lw-us.apache.org) with ESMTPS id 92EB65F397 for ; Mon, 14 Mar 2016 12:10:01 +0000 (UTC) Received: by mail.greenbytes.de (Postfix, from userid 117) id 3A9F015A0682; Mon, 14 Mar 2016 13:09:59 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=greenbytes.de; s=mail; t=1457957399; bh=ASa/Fo2wUbdX389WwciChdpVOqWCz63dfwncbDOHqI8=; h=Subject:From:In-Reply-To:Date:References:To:From; b=EnXwO2qGxnpLbeqMczQrbIbhYZCqu9Tna2cE4eipHSLrZ2mQR+bAE3fkWXgkKGjTQ h11OgPR0ZtLERTz7q5gFcTss1K5spmFP4xoCjUHOcBxra7RoyWoQsoglMVu9BiK67Z qhONWaYrajsNwvi2SRiCs+U8G0rul0wwr9xMJDos= Received: from [192.168.1.48] (unknown [87.78.27.87]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mail.greenbytes.de (Postfix) with ESMTPSA id 31CEB15A022E for ; Mon, 14 Mar 2016 13:09:57 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=greenbytes.de; s=mail; t=1457957398; bh=ASa/Fo2wUbdX389WwciChdpVOqWCz63dfwncbDOHqI8=; h=Subject:From:In-Reply-To:Date:References:To:From; b=qSZRZMA0eSS9K+ajGVRnNs2T1fQMT5Uj7te/XHuTYDS+NddHIyq6U0S5nghJSXWPP CZrxnTqrNPGfmhKm2kVYQH76T5yPvo8cd8dLNWbRPogviymjV7zJTbHUvy7Mqr1Q5l e705/QXf0TXu+7+E7sRwdTFeJdxAc354HnOeFyPs= Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\)) From: Stefan Eissing In-Reply-To: Date: Mon, 14 Mar 2016 13:09:52 +0100 Content-Transfer-Encoding: quoted-printable Message-Id: <57808150-35AC-416A-8E59-DA4EE2D91AA2@greenbytes.de> References: <41EC434E-1047-4811-BDAF-4FFED53D7AF0@greenbytes.de> <73802EFA-4392-4950-9B38-F935159E0EF6@greenbytes.de> To: users@httpd.apache.org X-Mailer: Apple Mail (2.3112) Subject: Re: [users@httpd] Potential HTTP/2 Bug within Apache 2.4.18 Good to hear! I will update the bug. Thanks. > Am 14.03.2016 um 13:08 schrieb Russel Van Tuyl = : >=20 > Stefan, version 1.2.8 works great. Thanks for the fix and for your = help. I create a bug report with Apache yesterday. Do you want to update = it or would you like me to? = https://bz.apache.org/bugzilla/show_bug.cgi?id=3D59176 >=20 > On Mon, Mar 14, 2016 at 7:05 AM, Stefan Eissing = wrote: > Russel, >=20 > if you have a apxs installed, it's probably easiest to checkout and = make the github alpha > release from https://github.com/icing/mod_h2/releases/tag/v1.2.8 where = I just released the > fix. There are other bug fixes in there, that should be good to have = as well. >=20 > If you want to stay on the pure 2.4.18, you can apply this patch: >=20 >=20 >=20 >=20 > Let me know if this works for you. >=20 > -Stefan >=20 > > Am 14.03.2016 um 11:35 schrieb Russel Van Tuyl = : > > > > I've never applied or tested a patch before, but i'm willing to give = it a shot. > > > > On Mon, Mar 14, 2016 at 5:35 AM, Stefan Eissing = wrote: > > > > > Am 13.03.2016 um 04:18 schrieb Russel Van Tuyl = : > > > > > > I'm running an Apache 2.4.18 web server (Server-A) compiled from = source as a reverse proxy. I'm using ProxyPass on Server-A to pass = traffic to a proxy, nghttpx, listening on 127.0.0.1:3000. This nghttpx = proxy sends traffic to a second server, Server-B, across the network. = Connections from a web browser on Client-C work fine connecting to = Server-A that connects to nghttpx proxy on 127.0.0.1:3000 that connects = to Server-B. These connections only work when Server-B is using Apache = 2.4.17. When Server-B is using Apache 2.4.18 the connection errors out = and will not complete. The exact error message is down below this = narrative. I'm not sure why it is requesting http://(null)/ . At this = point, the only that has changes is Server-B's version of Apache. = Neither Server-A or the nghttpx's configuration change, just the version = of Apache on Server-B. I've built both Apache 2.4.17 and 2.4.18 from = source on Server-B using the same configurations. The debug output from = mod_http2 for both a failed and successful connection can be found here: = http://pastebin.com/XnUL8aeh . Is this is a bug in Apache 2.4.18 or is = there something else I can try and do to narrow the problem down? > > > > > > > > > [Sat Mar 12 20:54:53.087621 2016] [http2:debug] [pid 21439:tid = 140096657385216] h2_stream.c(321): [client 192.168.56.120:34283] = h2_stream(73-1): RST=3D2 (internal err) GET http://(null)/ > > > > What I see from the 2.4.18 log is that the incoming request has no = ':authority' header and is rejected. Reading RFC 7540 carefully, this is = a bug. The nghttpx, acting as h1->h2 proxy MUST not send and :authority = header. nghttpx does everything right and mod_http2 has it wrong. > > > > Are you able to apply/test a patch? > > > > -Stefan > > = --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > > For additional commands, e-mail: users-help@httpd.apache.org > > > > > > > > > > -- > > Respectfully, > > Russel Van Tuyl > > > > =E2=80=9CIf you don=E2=80=99t go after what you want, you=E2=80=99ll = never have it. If you don=E2=80=99t ask, the answer is always no. If you = don=E2=80=99t step forward, you=E2=80=99re always in the same place.=E2=80= =9D -- Nora Roberts, author >=20 >=20 >=20 >=20 > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > For additional commands, e-mail: users-help@httpd.apache.org >=20 >=20 >=20 > --=20 > Respectfully, > Russel Van Tuyl >=20 > =E2=80=9CIf you don=E2=80=99t go after what you want, you=E2=80=99ll = never have it. If you don=E2=80=99t ask, the answer is always no. If you = don=E2=80=99t step forward, you=E2=80=99re always in the same place.=E2=80= =9D -- Nora Roberts, author --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org