On Sat, Jun 29, 2013 at 01:57:39PM -0600, Andy Bradford wrote:

Hi there,

> My current iteration is using tcpserver (inetd replacement) and stunnel.
> Stunnel's configuration is:
> 
> cert = ./test.pem
> exec = /tmp/fossil-src-20130618210923/fossil
> execargs = fossil http /tmp/test.fossil

This says "run fossil http, and it should assume that any generated
self-links should be to http:// urls".

Add "--https" for generated self-links to be to https:// urls.

(fossil help http)

> But when I try to use a browser  to access it, it fails. This is because
> it is sending an invalid Location header (and redirection).

Can you show the invalid Location header that it is sending?

I guess that it will be http://(whatever Host: header your client
sent); which will be invalid because there is not a http listener at
that location.

> Here is what I see when talking to it myself:
> 
> $ openssl s_client -connect fossil:1621                                       
>  
> CONNECTED(00000003)
> ... [trimmed]
> GET / HTTP/1.1
> Host: https://fossil:1621

What happens if you just send

GET / HTTP/1.0
Host: fossil:1621

? The important change there is that "http://"; or "https://"; does not
appear in the Host: header.

> Location: http://https://fossil:1621/index

fossil uses your Host: header, adds "http://"; (or "https://";) at the
start, and (in this case) /index at the end.

That should be correct behaviour, if you use the right Host: header
(which your browser should be sending) and (in your case) the --https
argument to "fossil http".

> This trips  up my browser (FireFox).  Is this a bug?

My Firefox doesn't send "https://"; in the Host header.

> So, I thought I would try it  with the --baseurl option, but that too is
> fraught  with  other  problems.

--baseurl does have its uses, but I suspect that "--https" may be all
you need to get over the first hurdle.


There may well be a second hurdle after that, of course ;-)

Cheers,

        f
-- 
Francis Daly        fran...@daoine.org
_______________________________________________
fossil-users mailing list
fossil-users@lists.fossil-scm.org
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to