report 571 not complete

==========================================================================
-- http/ https detection failes when exporting     JkEnvVar xxx yyy     

using the parameter     JkEnvVar xxx yyy
to submit environment variables from Apache to Tomcat causes
tomcat to set scheme always to https and secure


How To Reproduce (optional): 
use 
JkEnvVar xxx yyy 
in httpd.conf and look at SnoopServlet output
should report:
Scheme: http
Request Is Secure: false



Known Work Around 

org.apache.tomcat.service.connector;
public class Ajp13ConnectorRequest

comment out line:

                case SC_A_REQ_ATTRIBUTE :
===>>>>           //isSSL = true;
                            attributes.put(msg.getString(), msg.getString());
                break;

======================================================================================

The workaround and reproduce field was not taken by
bugrat

HWR

Reply via email to