On Thu, May 22, 2008 at 01:32:25AM -0700, Ruediger Pluem wrote: > > > On 05/22/2008 03:05 AM, Ray Van Dolson wrote: > > I'm having a heck of a time getting Palm Treo's to work through our > > Apache 2.2.3 based proxy talking to an OWA2K7 setup running on IIS. I > > believe I may be getting pinched by: > > > > https://issues.apache.org/bugzilla/show_bug.cgi?id=43238 > > > > The Treo seems to work fine without a proxy. I observe the following > > (no proxy): > > > > 1 TREO Sends OPTIONS request to IIS (Connection: Keep-Alive) > > 2 IIS Replies with 200 OK (No Connection header) > > 3 TREO Sends POST /Microsoft-Server-ActiveSync... (Connection: > > Keep-Alive) > > 4 IIS Replies with 200 OK + payload (No Connection header) > > > > As I said, everything works fine this way. With mod_proxy in the mix > > however: > > > > 1 TREO Sends OPTIONS request to Apache (Connection: Keep-Alive) > > 2 Apache Sends OPTIONS request to IIS (Connection: Close) > > 3 IIS Replies with 200 OK (Connection: Close) > > 4 Apache Sends 200 OK back to Treo (Connection: Close) > > 5 Apache Sends SSLv3 Close Notify to Treo > > 6 Apache Sends FIN,ACK to Treo > > 7 TREO Sends POST /Microsoft-Server-ActiveSync... (Connection: > > Keep-Alive) > > 8 Apache Sends ACK to Treo > > 9 Apache Sends Dup ACK to Treo > > 10 Apache Sends Dup ACK to Treo > > > > Timeout... > > First, please try using Apache 2.2.8 plus patches. There have been numerous > changes to > the proxy code between 2.2.8 and 2.2.3.
I figured as much and will do that today. > Second, is the above behaviour with or without the patch from PR43238? It is with -- sort of. I took the changes to the files and backported them into the RHEL5 Apache 2.2.3 RPM. It compiled, but based on the behavior I'm seeing, I'm not sure if it's working correctly. Going 2.2.8 is probably the better option. > Third, please post your proxy configuration. See: https://redowa.esri.com/owa.conf.include Notes: - SSLProxyProtocol is set to SSLv3 only so I can more easily decrypt packets with wireshark (TLSv1 decrypt seems hit and miss) - I have disabled mod_security for testing (though you see references to it) Thanks in advance. Ray
