https://bz.apache.org/bugzilla/show_bug.cgi?id=65666

            Bug ID: 65666
           Summary: 2.4.47 breaks ability to unset Expect header for proxy
                    compatibility, yielding 417 errors
           Product: Apache httpd-2
           Version: 2.4.47
          Hardware: All
                OS: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: mod_proxy
          Assignee: bugs@httpd.apache.org
          Reporter: kan...@luxsci.com
  Target Milestone: ---

Using mod_proxy and mod_headers.  Compiling apache on Oracle Linux 8 and CentOs
7.

Using v2.4.46 and prior versions, we have been able to use 

   RequestHeader unset Expect early

to remove the Expect header for requests that will use ProxyPass.  This served
to remove errors (417 errors) when "Expect: 100-continue" was sent for a
proxied connection.   This has worked for years until we updated to 2.4.50 this
week.  We immediately started getting 417 errors on these connections again. 
Rolling back to 2.4.46 with no other changes solved the problem on all upgraded
servers.

It appears that 2.4.47 has a patch for a mod_proxy/Expect issue in the Change
list:

"*) mod_proxy_http: Fix 100-continue deadlock for spooled request bodies,
     leading to Request Timeout (408).  PR 63855.  [Yann Ylavic]"

I see no other related changes in 47->50... so perhaps this patch broke
something?  Troubleshoot further (besides rollback), we have tried (all with no
success):

1/ Adding the "RequestHeader unset Expect early" globally instead of in a Vhost
2/ Adding "Proxy100Continue Off"

We have also:

1/ Verified that "RequestHeader unset" is working by sending other headers
through, and verifying that the back-end scripts do not see them.  (We have not
verified that it is merely "early" that is failing).

2/ Verified that connections with an Expect header to a non-proxied page work
fine... it is only pages served with ProxyPass

We have not yet found a workaround that permits: ProxyPass + Clients sending an
Expect header + Apache 2.4.50+ to function properly.  We have also not yet
found any discussion of this on Google.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to