Mailing List Archive

[Bug 66190] unwanted error log messages for TLS reverse proxy connections
https://bz.apache.org/bugzilla/show_bug.cgi?id=66190

Stefan Eissing <icing@apache.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
OS| |All
Status|NEW |NEEDINFO

--- Comment #1 from Stefan Eissing <icing@apache.org> ---
Thanks for your analysis of the problem. Yes, indeed that is an unwanted side
effect of the change that you see error messages where everything is working.
However, to see if we/how we would fix this or if adding/documenting the use of
SSLProxyEngine is more beneficial, could you add a minimal configuration file
where the problem occurs?

Do you have a global SSLProxyEngine configured that is not properly inherited
by the Proxy section, or was there never a SSLProxyEngine in play and the
previous code worked despite it?

Thanks.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 66190] unwanted error log messages for TLS reverse proxy connections [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=66190

--- Comment #2 from WJCarpenter <bill-apache@carpenter.org> ---
We observed this in a pretty complex production environment where our
httpd.conf is many hundreds of lines long (of course, mostly nothing to do with
this particular thing). I can try to narrow it to a simpler environment and
configuration, but it will probably take a me some days to be able to do that.

In the meantime, I can describe how we have configured things.

1. We never had a global / top-level SSLProxyEngine directive.
2. We always placed the SSLProxyEngine directive within the <Proxy> blocks that
actually use TLS (along with other SSLProxy* directives.
3. For <Proxy> blocks that do not use TLS, we don't use any SSLProxy*
directives in those blocks.
4. For our workaround, we left everything as described above, and we added an
"SSLProxyEngine on" directive to our <VirtualHost> block.

Let me know if you still need a simple repro config. If so, I'll try to get
that as soon as I can.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 66190] unwanted error log messages for TLS reverse proxy connections [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=66190

--- Comment #3 from Stefan Eissing <icing@apache.org> ---
Thanks for the description. I will see if I can reproduce the behaviour in a
test case.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 66190] unwanted error log messages for TLS reverse proxy connections [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=66190

--- Comment #4 from Stefan Eissing <icing@apache.org> ---
Created attachment 38357
--> https://bz.apache.org/bugzilla/attachment.cgi?id=38357&action=edit
mod_ssl patch

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 66190] unwanted error log messages for TLS reverse proxy connections [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=66190

--- Comment #5 from Stefan Eissing <icing@apache.org> ---
I reproduced the behaviour in a test case and wrote the attached patch.

Are you able to verify that with this patch the behaviour is fixed? Thanks.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 66190] unwanted error log messages for TLS reverse proxy connections [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=66190

--- Comment #6 from WJCarpenter <bill-apache@carpenter.org> ---
I confirm that the patch got rid of the message in error.log for my
configuration. I applied the patch and tested with the 2.4.54 sources. Tested
on Linux.

Thanks for your quick action on this.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 66190] unwanted error log messages for TLS reverse proxy connections [ In reply to ]
https://bz.apache.org/bugzilla/show_bug.cgi?id=66190

Stefan Eissing <icing@apache.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEEDINFO |RESOLVED
Resolution|--- |FIXED

--- Comment #7 from Stefan Eissing <icing@apache.org> ---
Fixed in r1903167.

--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org