Your message dated Mon, 19 Jul 2010 16:55:09 -0700
with message-id <1279583709.30932.19.ca...@selene>
and subject line Fixed upsteam in release 0.5.4
has caused the Debian Bug report #577141,
regarding libapache2-mod-gnutls: incompatible with mod_proxy_http
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
577141: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577141
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libapache2-mod-gnutls
Version: 0.5.1-1
Severity: important
Tags: patch

Description:
As discussed on the upstream bug tracker at 
http://issues.outoforder.cc/view.php?id=87 mod_gnutls 0.5.1 is 
incompatible with mod_proxy_http. 

Symptom:
The web browser will keep loading for a long time. When a timeout is 
reached, it will return an error message:
> Bad Gateway
> The proxy server received an invalid response from an upstream server.

The servers' / VirtualHosts' error log will contain entries such as:
> [error] [client 127.0.0.1] GnuTLS: Handshake Failed. Hit Maximum Attempts
> [error] (103)Software caused connection abort: proxy: pass request 
body failed to 127.0.0.1:8180 (127.0.0.1)
> [error] proxy: pass request body failed to 127.0.0.1:8180 (127.0.0.1) from 
> 127.0.0.1 ()

Workaround:
* Use mod-(open)ssl instead of mod-gnutls
* Use mod_jk instead of mod_proxy if you're using mod_proxy to connect 
to tomcat
* Rebuild package with patch at 
http://issues.outoforder.cc/file_download.php?file_id=33&type=bug
* Backport version from squeeze which should contain this patch

Fix:
* Rebuild package with patch at
http://issues.outoforder.cc/file_download.php?file_id=33&type=bug

Note that this is just a partial fix since, as discussed at 
http://issues.outoforder.cc/view.php?id=97 , the patch only fixes 
non-encrypted ProxyPass connections (http but not https).


Thanks.

-- System Information:
Debian Release: 5.0.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-xen-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages libapache2-mod-gnutls depends on:
ii  libc6                     2.7-18lenny2   GNU C Library: Shared libraries
ii  libgnutls26               2.4.2-6+lenny2 the GNU TLS library - runtime libr

libapache2-mod-gnutls recommends no packages.

libapache2-mod-gnutls suggests no packages.

-- no debconf information



--- End Message ---
--- Begin Message ---
Version: 0.5.5-1

Thanks for your report! I think this was fixed upstream in release
0.5.4, so I'm marking fixed in package version 0.5.5-1


--- End Message ---

Reply via email to