[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 Yann Ylavic changed: What|Removed |Added Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #15 from Yann Ylavic --- Fixed in 2.4.49 (r1892569). -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 Yann Ylavic changed: What|Removed |Added Keywords||FixedInTrunk -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 Yann Ylavic changed: What|Removed |Added Attachment #37932|0 |1 is obsolete|| --- Comment #14 from Yann Ylavic --- Created attachment 37937 --> https://bz.apache.org/bugzilla/attachment.cgi?id=37937&action=edit Fix ap_proxy_define_worker for matchable workers (v3) Latest patch, as commited in r1891206 and r1891216. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #13 from Yann Ylavic --- No, the fix is only is this PR for now, no distribution has picked it up yet. To test it, you need to recompile httpd from sources (see the link provided in my previous comment), or recompile your distribution's apache2 package from sources (with the patch included, the procedure depends on the distribution, I can't help you with this). -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #12 from Abhishek Kr Sharma --- Actually we don't compile. We just use apt install apache2 to install the same. Is there any fix for that. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #11 from Yann Ylavic --- First download the patch here: https://bz.apache.org/bugzilla/attachment.cgi?id=37932 (browser's "save page as" proposes to save the file "bz_65419-fix_proxy_define_worker-v2.patch"). Then: $ cd /path/to/sources/httpd-2.4.48 $ ls include modules server ... $ patch -p0 < /path/to/downloaded/bz_65419-fix_proxy_define_worker-v2.patch $ make && make install If you have never compiled httpd from sources, please have a look at: https://httpd.apache.org/docs/current/install.html (the patch command above would go between the "Extract" and "Configure" phases). -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #10 from Abhishek Kr Sharma --- I am not getting this file in my apache2 modules proxy_util.c . Can you please help me to setup. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 Yann Ylavic changed: What|Removed |Added Attachment #37931|0 |1 is obsolete|| --- Comment #9 from Yann Ylavic --- Created attachment 37932 --> https://bz.apache.org/bugzilla/attachment.cgi?id=37932&action=edit Fix ap_proxy_define_worker for matchable workers (v2) v2 to fix a regression with "unix:" schemes (unrelated to this PR). -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #8 from Yann Ylavic --- Created attachment 37931 --> https://bz.apache.org/bugzilla/attachment.cgi?id=37931&action=edit Fix ap_proxy_define_worker for matchable workers The issue is that ProxyPass and ProxyPassMatch URLs were considered the same because anything after the '$' was being ignored. Could you please try this patch (against 2.4.48)? -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #7 from Yann Ylavic --- Wait, I was running a version < 2.4.48, now I see it. Let me debug that.. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #6 from Yann Ylavic --- Here are the logs I get with a similar configuration: LogLevel trace5 ServerName localhost:58080 ProxyPreserveHost on ProxyPassMatch ^/((es|en|de)/test/?(/.*)?) http://localhost:9090/$1 ProxyPassReverse ^/((es|en|de)/test/?(/.*)?) http://localhost:9090/$1 ProxyPass / http://localhost:9090/ ProxyPassReverse / http://localhost:9090/ ErrorLog "logs/error_localhost_58080_log" $ curl -v -k http://localhost:58080/prelogin/pin ... $ cat logs/error_localhost_58080_log [Thu Jul 01 16:48:09.036573 2021] [proxy:debug] [pid 347290:tid 140737350260032] proxy_util.c(1938): AH00925: initializing worker http://localhost:9090/$1 shared [Thu Jul 01 16:48:09.036581 2021] [proxy:debug] [pid 347290:tid 140737350260032] proxy_util.c(1998): AH00927: initializing worker http://localhost:9090/$1 local [Thu Jul 01 16:48:09.036588 2021] [proxy:debug] [pid 347290:tid 140737350260032] proxy_util.c(2032): AH00930: initialized pool in child 347290 for (localhost) min=0 max=25 smax=25 [Thu Jul 01 16:48:09.036591 2021] [proxy:debug] [pid 347290:tid 140737350260032] proxy_util.c(1938): AH00925: initializing worker http://localhost:9090/ shared [Thu Jul 01 16:48:09.036594 2021] [proxy:debug] [pid 347290:tid 140737350260032] proxy_util.c(1998): AH00927: initializing worker http://localhost:9090/ local [Thu Jul 01 16:48:09.036600 2021] [proxy:debug] [pid 347290:tid 140737350260032] proxy_util.c(2032): AH00930: initialized pool in child 347290 for (localhost) min=0 max=25 smax=25 [Thu Jul 01 16:48:55.577246 2021] [core:trace5] [pid 347290:tid 140737333499648] protocol.c(708): [client ::1:40042] Request received from client: GET /prelogin/ping HTTP/1.1 [Thu Jul 01 16:48:55.577367 2021] [http:trace4] [pid 347290:tid 140737333499648] http_request.c(435): [client ::1:40042] Headers received from client: [Thu Jul 01 16:48:55.577390 2021] [http:trace4] [pid 347290:tid 140737333499648] http_request.c(438): [client ::1:40042] Host: localhost:58080 [Thu Jul 01 16:48:55.577406 2021] [http:trace4] [pid 347290:tid 140737333499648] http_request.c(438): [client ::1:40042] User-Agent: curl/7.74.0 [Thu Jul 01 16:48:55.577421 2021] [http:trace4] [pid 347290:tid 140737333499648] http_request.c(438): [client ::1:40042] Accept: */* [Thu Jul 01 16:48:55.577446 2021] [proxy:trace2] [pid 347290:tid 140737333499648] mod_proxy.c(686): [client ::1:40042] AH03461: attempting to match URI path '/prelogin/ping' against pattern '^/((es|en|de)/test/?(/.*)?)' for proxying [Thu Jul 01 16:48:55.577487 2021] [proxy:trace2] [pid 347290:tid 140737333499648] mod_proxy.c(686): [client ::1:40042] AH03461: attempting to match URI path '/prelogin/ping' against prefix '/' for proxying [Thu Jul 01 16:48:55.577505 2021] [proxy:trace1] [pid 347290:tid 140737333499648] mod_proxy.c(772): [client ::1:40042] AH03464: URI path '/prelogin/ping' matches proxy handler 'proxy:http://localhost:9090/prelogin/ping' [Thu Jul 01 16:48:55.577531 2021] [authz_core:debug] [pid 347290:tid 140737333499648] mod_authz_core.c(843): [client ::1:40042] AH01628: authorization result: granted (no directives) [Thu Jul 01 16:48:55.577547 2021] [core:trace3] [pid 347290:tid 140737333499648] request.c(310): [client ::1:40042] request authorized without authentication by access_checker_ex hook: /prelogin/ping [Thu Jul 01 16:48:55.577571 2021] [proxy_http:trace1] [pid 347290:tid 140737333499648] mod_proxy_http.c(62): [client ::1:40042] HTTP: canonicalising URL //localhost:9090/prelogin/ping [Thu Jul 01 16:48:55.577618 2021] [proxy:trace2] [pid 347290:tid 140737333499648] proxy_util.c(2142): [client ::1:40042] http: found worker http://localhost:9090/ for http://localhost:9090/prelogin/ping [Thu Jul 01 16:48:55.577638 2021] [proxy:debug] [pid 347290:tid 140737333499648] mod_proxy.c(1251): [client ::1:40042] AH01143: Running scheme http handler (attempt 0) [Thu Jul 01 16:48:55.577655 2021] [proxy_http:trace1] [pid 347290:tid 140737333499648] mod_proxy_http.c(1977): [client ::1:40042] HTTP: serving URL http://localhost:9090/prelogin/ping [Thu Jul 01 16:48:55.577684 2021] [proxy:debug] [pid 347290:tid 140737333499648] proxy_util.c(2336): AH00942: HTTP: has acquired connection for (localhost) [Thu Jul 01 16:48:55.577703 2021] [proxy:debug] [pid 347290:tid 140737333499648] proxy_util.c(2392): [client ::1:40042] AH00944: connecting http://localhost:9090/prelogin/ping to localhost:9090 [Thu Jul 01 16:48:55.578180 2021] [proxy:debug] [pid 347290:tid 140737333499648] proxy_util.c(2615): [client ::1:40042] AH00947: connected /prelogin/ping to localhost:9090 ... So there is something fishy in your settings that ignores the ProxyPass directive, mine is logging this at startup: AH00925: initializing worker http://localhost:9090/$1 shared AH00925: initializing worker http://localhost:9090/ shared Can you see these logs somewhere (maybe in the main error_log file)? -- You are receiving this m
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #5 from Abhishek Kr Sharma --- Logs : [Thu Jul 01 19:30:11.214657 2021] [ssl:info] [pid 20479:tid 139815009842944] [client 10.10.6.121:25916] AH01964: Connection to child 263 established (server apache.mettl.pro:443) [Thu Jul 01 19:30:11.214777 2021] [ssl:trace2] [pid 20479:tid 139815009842944] ssl_engine_rand.c(126): Server: Seeding PRNG with 656 bytes of entropy [Thu Jul 01 19:30:11.214842 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2204): [client 10.10.6.121:25916] OpenSSL: Handshake: start [Thu Jul 01 19:30:11.214887 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: before SSL initialization [Thu Jul 01 19:30:11.214919 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 5/5 bytes from BIO#7f2910003840 [mem: 7f29100090e3] [Thu Jul 01 19:30:11.214931 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 163/163 bytes from BIO#7f2910003840 [mem: 7f29100090e8] [Thu Jul 01 19:30:11.214939 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: before SSL initialization [Thu Jul 01 19:30:11.214953 2021] [ssl:debug] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2425): [client 10.10.6.121:25916] AH02645: Server name not provided via TLS extension (using default/first virtual host) [Thu Jul 01 19:30:11.215014 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS read client hello [Thu Jul 01 19:30:11.215045 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS write server hello [Thu Jul 01 19:30:11.215098 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: write 4096/4096 bytes to BIO#7f2910003780 [mem: 7f2910012390] [Thu Jul 01 19:30:11.215138 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS write certificate [Thu Jul 01 19:30:11.216433 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS write key exchange [Thu Jul 01 19:30:11.216460 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: write 1154/1154 bytes to BIO#7f2910003780 [mem: 7f2910012390] [Thu Jul 01 19:30:11.216540 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS write server done [Thu Jul 01 19:30:11.217186 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 5/5 bytes from BIO#7f2910003840 [mem: 7f29100134e3] [Thu Jul 01 19:30:11.217206 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 70/70 bytes from BIO#7f2910003840 [mem: 7f29100134e8] [Thu Jul 01 19:30:11.217215 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS write server done [Thu Jul 01 19:30:11.217366 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 5/5 bytes from BIO#7f2910003840 [mem: 7f29100146d3] [Thu Jul 01 19:30:11.217379 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 1/1 bytes from BIO#7f2910003840 [mem: 7f29100146d8] [Thu Jul 01 19:30:11.217386 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS read client key exchange [Thu Jul 01 19:30:11.217420 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 5/5 bytes from BIO#7f2910003840 [mem: 7f29100146d3] [Thu Jul 01 19:30:11.217444 2021] [ssl:trace4] [pid 20479:tid 139815009842944] ssl_engine_io.c(2310): [client 10.10.6.121:25916] OpenSSL: read 40/40 bytes from BIO#7f2910003840 [mem: 7f29100146d8] [Thu Jul 01 19:30:11.217453 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS read change cipher spec [Thu Jul 01 19:30:11.217474 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS read finished [Thu Jul 01 19:30:11.217531 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_engine_kernel.c(2213): [client 10.10.6.121:25916] OpenSSL: Loop: SSLv3/TLS write session ticket [Thu Jul 01 19:30:11.217554 2021] [ssl:trace3] [pid 20479:tid 139815009842944] ssl_en
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #4 from Yann Ylavic --- Please provide the logs with "LogLevel trace5". -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #3 from Abhishek Kr Sharma --- ServerName apache.mettl.pro SSLProxyEngine on ProxyPreserveHost On SSLProtocol TLSv1.2 ProxyPassMatch ^/((es|en|de)/test/?(/.*)?) http://localhost:9090/$1 ProxyPassReverse ^/((es|en|de)/test/?(/.*)?) http://localhost:9090/$1 ProxyPass / http://localhost:9090/ ProxyPassReverse / http://localhost:9090/ ProxyRequests Off Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" SSLEngine on SSLCertificateFile /etc/ssl/certs/server.crt SSLCertificateKeyFile /etc/ssl/private/server.key SSLCertificateChainFile /etc/ssl/certs/server_bundle.crt After commenting this ProxyPassMatch ^/((es|en|de)/test/?(/.*)?) http://localhost:9090/$1 ProxyPassReverse ^/((es|en|de)/test/?(/.*)?) http://localhost:9090/$1 Everything is working fine. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #2 from Abhishek Kr Sharma --- The issue is that it's not going to / Location just stay in given regex: ^/((es|en|de)/test/?(/.*)?) applying pattern '^(.*)$' to uri '/prelogin/ping' it should go to / for all reamined request. The same file is working on apache 2.4.46 . -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org
[Bug 65419] Regexp parsing problem in ProxyPassMatch, Unable to find the relavant path
https://bz.apache.org/bugzilla/show_bug.cgi?id=65419 --- Comment #1 from Yann Ylavic --- (In reply to Abhishek Kr Sharma from comment #0) > Apache conf: > > > ServerName apache.mettl.pro > ... > It looks like the VirtualHost above is not selected to handle the connection/request. > > > Error_logs: > > [Thu Jul 01 14:50:05.496838 2021] [ssl:debug] [pid 7018:tid 139912673023744] > ssl_engine_kernel.c(2425): [client 10.10.5.223:19000] AH02645: Server name > not provided via TLS extension (using default/first virtual host) This and the following logs show RewriteRule(s) outputs but nothing proxy related. Please check your VirtualHosts declarations/order with "apachectl -S", if SNI is required to access this virtual host then it can't work for non-SNI clients. -- You are receiving this mail because: You are the assignee for the bug. - To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org For additional commands, e-mail: bugs-h...@httpd.apache.org