DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG· RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=36655>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND· INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=36655 Summary: mod_jk 1.2.12+ does not submit correct request port number to tomcat Product: Tomcat 4 Version: 4.1.31 Platform: Other OS/Version: Solaris Status: NEW Severity: major Priority: P2 Component: Connector:JK/AJP AssignedTo: tomcat-dev@jakarta.apache.org ReportedBy: [EMAIL PROTECTED] In our infrastructure a https request is handled in this way: https request(port 443) -> SSL-accelerator (Nortel/Alteon) -> decrypted request port 50443 -> Apache-2.0.53 listening on 80, 55443 using virtual hosts -> mod_jk 1.2.12, AJP13 port 8200 -> Tomcat 4.1.31 with application The application checks wether a request hit the Apache2 on port 55443 or 80. If the port was 80, a warning message is sent back to the client about unencrypted traffic. Now we got the warning message also with a request on port 55443. mod_jk logs in debug mode: [Fri Sep 09 11:28:20 2005] [22238:0006] [debug] init_ws_service::mod_jk.c (510): Service pro tocol=HTTP/1.1 method=GET host=(null) addrr=192.168.70.130 name=jportal1-riat-p.bap.fiducia. de port=80 auth=(null) user=(null) laddr=10.253.52.65 raddr=192.168.70.130 So there is a wrong port number sent to Tomcat/application. I have traced the problem down to jakarta-tomcat-connectors-1.2.12-src/jk/native/apache-2.0/mod_jk.c where I've found the following: /* get the real port (otherwise redirect failed) */ /* XXX: use apache API for getting server port * * Pre 1.2.7 versions used: * s->server_port = r->connection->local_addr->port; */ s->server_port = ap_get_server_port(r); So I uncommented the old code and commented the new line: /* get the real port (otherwise redirect failed) */ /* XXX: use apache API for getting server port * * Pre 1.2.7 versions used: */ s->server_port = r->connection->local_addr->port; /* s->server_port = ap_get_server_port(r); */ Now the mod_jk log says: [Fri Sep 09 13:15:10 2005] [22238:0006] [debug] init_ws_service::mod_jk.c (510): Service pro tocol=HTTP/1.1 method=GET host=(null) addrr=192.168.70.130 name=jportal1-riat-p.bap.fiducia. de port=55443 auth=(null) user=(null) laddr=10.253.52.65 raddr=192.168.70.130 The port is now sent correctly to Tomcat/application. -- Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
