On 08.02.2014 02:32, Luca Anchora wrote: > Dear all, > I am a newbie to this mailing list so please apologize me if this is not > the right place to post the following issue. > I am trying to use the Apache Web Server 2.4.7 - httpd from now on - as > a forward proxy for SSL tunneling to be placed between another proxy and > a remote host in my network. While doing some troubleshooting I realized > that every time the httpd receives a CONNECT request, if the connection > to the remote host (i.e. the opening of the TCP session) goes fine, it > responds back by using the HTTP/1.0 protocol even though the request was > issued in HTTP/1.1 (i.e. something starting with CONNECT > <remote-host>:<remote_port> HTTP/1.1). > I digged into the source code of the project, in particular the file > modules/proxy/mod_proxy_connect.c. At line 380 the heading line of the > response to a CONNECT is statically set to "HTTP/1.0 200 Connection > Established", even though the request was in HTTP/1.1. > > I wonder if this behaviour is desired or not, considering that with > HTTP/1.0 the TCP session is immediately closed. Please consider that in > my scenario the "client" of httpd is another proxy used by a client > speaking HTTPS. When httpd closes the TCP session then the first proxy > itself tears down its session with the original client, and then another > SSL handshake is needed to re-open it for further requests.
The question belongs to the users list: http://httpd.apache.org/lists.html#http-users Concerning the 1.0 response that's what is also in the document that to my knowledge is the best approximation of the CONNECT spec: http://tools.ietf.org/html/draft-luotonen-web-proxy-tunneling-01 Although there it is an example response to a 1.0 request, it makes clear that the usual connection closure semantics of HTTP 1.0 do no longer apply once a CONNECT method is used. You didn't tell us your problem (what doesn't work or works not as expected). Please post again with more info on the users list. Regards, Rainer --------------------------------------------------------------------- To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
