ID: 44248
User updated by: jboffel at gmail dot com
Reported By: jboffel at gmail dot com
Status: Verified
Bug Type: SOAP related
Operating System: Linux RedHat Enterprise
PHP Version: 5.2.9
New Comment:
Did you test to use Apache like web server or like proxy ?
I had problem when used like proxy with Apache 1.3
You should get a 400 Bad Request error status code...
The only case it could not return error is if the host is in fact an
IP. In that case host parameter is supposed to be sent empty so it's
possible they decided to accept without complaining requests in this
particular case.
Previous Comments:
------------------------------------------------------------------------
[2009-09-09 19:46:28] sjo...@php.net
Could reproduce. The SoapClient does indeed not send a Host parameter
when doing a CONNECT, which is a bug because the RFC says it should.
However, this causes no problems with any version of Apache I tried
(1.3, 2.0, 2.2).
------------------------------------------------------------------------
[2009-09-01 18:55:53] jboffel at gmail dot com
The thing is that Apache server follow the RFC and really block
(voluntarily that is not a bug) the request (there is no workaround to
force Apache to do the job or I didn't find it). You can see in the
error log file that Apache ask us to follow the RFC and add the Host
parameter.
So basically Apache used as a proxy doesn't really "need" Host
parameter but it's to avoid bug when connecting, or example, to an
Apache web server which uses VirtualHost based certificates
configurations with HTTPS connections...
So yes it's only linked to the RFC.
------------------------------------------------------------------------
[2009-09-01 18:43:54] sjo...@php.net
Does the Apache proxy really need the Host header? Is this bug a
problem other than that it does not conform with the RFC?
------------------------------------------------------------------------
[2009-09-01 17:14:32] jboffel at gmail dot com
Hi,
Thanks for your test, but you have to do it through HTTPS connection to
reproduce the bug.
In fact, the bug is linked to the use of an Apache proxy through HTTPS
connection and a SOAP call. If you connect through HTTP you don't do the
CONNECT command and you can't see the bug.
------------------------------------------------------------------------
[2009-09-01 17:11:14] sjo...@php.net
I misunderstood the problem. The request I posted was for HTTP, not for
HTTPS. For HTTPS, the Host header is indeed missing. I am not yet sure
that that is a bug.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/44248
--
Edit this bug report at http://bugs.php.net/?id=44248&edit=1
