Mailing List Archive: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15

Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15

cherokee at googlecode

Oct 12, 2011, 3:12 PM

Post #1 of 51 (12019 views)

Status: New
Owner: ----

New issue 1284 by aminl...@gmail.com: SSL POST REQUESTS break on Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Chrome Version : 15.0.874.24
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
URLs (if applicable) :
Other browsers tested:
Add OK or FAIL after other browsers where you have tested this issue:
Safari 5: OK
Firefox 4.x: OK
IE 7/8/9: OK

What steps will reproduce the problem?
1. Go to https://app.fluidsurveys.com/accounts/login/
2. Type anything for username/password
3. Use the request monitor and watch the request fail

What is the expected result?
If you use Chrome <= 14 or any other browser it will either log you in or
tell you bad password

What happens instead?
If you use the network inspector the connection is aborted by the browser.

Please provide any additional information below.

UserAgentString: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/535.2
(KHTML, like Gecko) Chrome/15.0.874.24 Safari/535.2

I submitted this bug to the chromium team and they say that they
intentionally changed the behavior on SSL posts.
See: http://code.google.com/p/chromium/issues/detail?id=98101#makechanges

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 12, 2011, 3:21 PM

Post #2 of 51 (11896 views)

Comment #1 on issue 1284 by g...@openov.nl: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Just wrote this to Alvaro:

Hi,

I have set up a test for the Chrome vs Cherokee vs SSL bug.

After a lot of debugging some conclusions arrive;

the Content-Length basically is set, SSL_read only gets 1 actual byte
back. and the following sequence can be seen in cherokee trace:

thread.c:0659 ( process_active_connections): Active
connections:
thread.c:0667 ( process_active_connections): \- thread
(0x6125f0) processing conn (0x622e20), phase 6 'Reading POST',
socket=18,read
thread.c:0679 ( process_active_connections): thread
(0x6125f0) processing conn (0x622e20), phase 6 'Reading POST',
socket=18, read

The post reading (thread.c:1215) already returned 'eagain', but it
does so only once. It will get there because it is shortcutted at
thread.c:771

Now after I found this, I commented it out... and 'wow' it worked
again. So... could you pretty please look at this. (And
cherokee-project.org)

Stefan

===============

The quick workaround: comment out line 771 in thread.c. No guarantees!

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 12, 2011, 3:25 PM

Post #3 of 51 (11898 views)

Comment #2 on issue 1284 by pig...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

The other workaround is to use rev proxy instead of *cgi

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 12, 2011, 3:29 PM

Post #4 of 51 (11900 views)

Updates:
Status: Accepted
Owner: alobbs
Labels: Type-Defect Priority-Critical Component-Logic Usability OpSys-All

Comment #3 on issue 1284 by ste...@konink.de: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

(No comment was entered for this change.)

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 14, 2011, 12:20 PM

Post #5 of 51 (11893 views)

Comment #4 on issue 1284 by leecook...@gmail.com: SSL POST REQUESTS break
on Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

online.wsj.com login (drop-down on right side) also fails on https login,
but works if the form action is http. Same symptoms where it works in all
other browsers and Chrome <= 14

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 22, 2011, 7:52 AM

Post #6 of 51 (11862 views)

Comment #5 on issue 1284 by alobbs: SSL POST REQUESTS break on Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Reproduced. A few PHP lines were enough:

===========
<?php
if ($_SERVER['REQUEST_METHOD'] == 'POST') {
echo '<h1>POST</h1>';
echo '<pre>';
print_r($_POST);
echo '</pre><hr/>';
} else {
print('<form method="POST" action="/index.php">');
print(' <input type="hidden" name="foo" value="bar">');
print(' <input type="submit">');
print('</form>');
}
?>
===========

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 25, 2011, 10:18 AM

Post #7 of 51 (11852 views)

Comment #6 on issue 1284 by aminl...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Chrome 15 is now stable resulting in our site (and any other site with a
ssl certificate) to break.

What's the status on getting the fix up and running?

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 25, 2011, 10:45 AM

Post #8 of 51 (11851 views)

Comment #7 on issue 1284 by pig...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

As I said before... the fast workaround seems to be rev-proxy because it
fully works for me (while the non rev-proxy doesnt).

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Oct 27, 2011, 9:43 AM

Post #9 of 51 (11827 views)

Comment #8 on issue 1284 by aminl...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

It seems that google has decided to give the world a 6 week window to fix
the problem:

Yes, 15.0.874.106 doesn't include 1/n-1 record splitting and, based on
policy, it's unlikely that the rest of the 15 series will. The change was
more disruptive than the beta period had suggested and we're working with
several large sites who need to update.

1/n-1 record splitting will continue on the beta and dev channels and will
reappear in 6 weeks with Chrome 16.

- from http://code.google.com/p/chromium/issues/detail?id=98101

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Nov 7, 2011, 6:23 PM

Post #10 of 51 (11801 views)

Comment #9 on issue 1284 by jordan.a...@gmail.com: SSL POST REQUESTS break
on Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

I'm also seeing this error, and only for Chrome 16+. I don't have the
option of doing reverse proxy since I'm using the uwsgi handler. Is there
any solution for me other than recompiling? I'm not comfortable commenting
out lines of code without understanding the full effect of doing so.

Also, is this related using the uwsgi handler or is it any handler? The
comments above suggest that changes to Cherokee could fix this, but I was
unsure whether the problem exists in the server or the handler.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Nov 7, 2011, 7:46 PM

Post #11 of 51 (11804 views)

Comment #10 on issue 1284 by aminl...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

I'm using the fcgi handler, so it's not just uwsgi...

Reverse proxy can be an option, but only if you defer http processing
to another app, like gunicorn.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Dec 15, 2011, 3:53 AM

Post #12 of 51 (11732 views)

Comment #11 on issue 1284 by scai...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Today has been released Chrome 16, and Cherokee has problems with the
Googles TLS False Start.
All the SSL post will be fail.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Dec 19, 2011, 11:22 AM

Post #13 of 51 (11716 views)

Comment #12 on issue 1284 by aminl...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Any word on this?

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Dec 19, 2011, 1:07 PM

Post #14 of 51 (11687 views)

Comment #13 on issue 1284 by ste...@konink.de: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

See the other bug report. We are working on the new-event branch. It is not
production grade yet. But it looks promising.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 4, 2012, 1:18 AM

Post #15 of 51 (11667 views)

Comment #14 on issue 1284 by arsi.hal...@gmail.com: SSL POST REQUESTS break
on Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Hi Stefan, What other bug report are you referring to?

We are deploying new servers with Cherokee version 1.2.101 + uWSGI + Django
and seem to have this same issue with Chrome users. Any suggestion how to
fix this.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 4, 2012, 6:55 AM

Post #16 of 51 (11666 views)

Comment #15 on issue 1284 by aminl...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

You can find a package with the quick fix (commenting out that line) that
Stefan posted about at https://launchpad.net/~sciyoshi/+archive/ppa

We've been using the package from that ppa in production for a few weeks.
It's was compiled for natty, but it installs fine on oneiric so we didn't
recompile.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 4, 2012, 10:18 AM

Post #17 of 51 (11655 views)

Comment #16 on issue 1284 by shen...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Here are my notes/log from a chat with Stefan on #cherokee IRC about the
issue:

https://gist.github.com/eb2a5f7741efb1d0053d

I believe this is the offending line that needs to be commented out:
https://github.com/cherokee/webserver/blob/master/cherokee/thread.c#L771

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 4, 2012, 10:35 AM

Post #18 of 51 (11650 views)

Comment #17 on issue 1284 by ste...@konink.de: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Today I have deployed the 'new-events' branch
https://github.com/cherokee/webserver/tree/new-events to all our servers
taking SSL post requests. Most likely Alvaro will merge soon.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 5, 2012, 3:34 AM

Post #19 of 51 (11648 views)

Comment #18 on issue 1284 by lnu...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

is the package https://launchpad.net/~sciyoshi/+archive/ppa Working Fine
so I can take the patch and release a new cherokee packages for launchpad
and add the patch to Debian Unstable ?

or sould I wait for the new cherokee release with 'new-events' for the new
packages?

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 5, 2012, 5:15 AM

Post #20 of 51 (11650 views)

Comment #19 on issue 1284 by arsi.hal...@gmail.com: SSL POST REQUESTS break
on Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

We re-compiled the Cherokee with the quickfix and it seems to be working
fine. We are now running Cherokee + uWSGI + Django on Ubuntu 10.04 without
problems.
Thanks!

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 5, 2012, 10:42 AM

Post #21 of 51 (11639 views)

Comment #20 on issue 1284 by ste...@konink.de: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Wait till new-events is ready.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 6, 2012, 10:02 AM

Post #22 of 51 (11644 views)

Comment #21 on issue 1284 by sare...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

We serve a lot of https content and immediately got complaints from dozens
of Chrome users about not being able to use forms when we moved our servers
to Cherokee last week. We are using fcgi handlers. At least I'm happy to
have found this thread after extensive googling and being completely
confused.

Is there an ETA for this new-events being ready? Days? Weeks?

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 6, 2012, 11:16 AM

Post #23 of 51 (11652 views)

Comment #22 on issue 1284 by ste...@konink.de: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

It is already merged in the dev branch. So I guess there will be a release
candidate. Nothing is stopping you from fetching it from github.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 7, 2012, 2:34 PM

Post #24 of 51 (11633 views)

Comment #23 on issue 1284 by ste...@konink.de: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

http://www.cherokee-project.com/download/pre-releases/cherokee-1.3.0A1.tar.gz

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev

Re: Issue 1284 in cherokee: SSL POST REQUESTS break on Chrome 15 [ In reply to ]

cherokee at googlecode

Jan 7, 2012, 2:54 PM

Post #25 of 51 (11638 views)

Comment #24 on issue 1284 by sare...@gmail.com: SSL POST REQUESTS break on
Chrome 15
http://code.google.com/p/cherokee/issues/detail?id=1284

Thanks.

_______________________________________________
Cherokee-dev mailing list
Cherokee-dev@lists.octality.com
http://lists.octality.com/listinfo/cherokee-dev