On Tue, Oct 24, 2023 at 2:02 PM Paul <storm...@stormy.ca> wrote:
> On 2023-10-24 13:17, Jose Stefan wrote: > > Please don't top-post > > > No, not that I am aware off. The push is only triggered by the > > "H2PushResource" directive shown. Which I tried to showcase with the > > 3^rd test. > > > > Within fileA.php and fileB.php the stylesheet is loaded with this line: > > <link href="fileC.css" rel="stylesheet"> > > > > A tag within the html content, and not a header. > > > > To perform my tests I'm mostly using the command line: > > nghttp -vn URL > > ^^^^^^ > What version of Apache / httpd? What server system / version? I > personally had never heard of Nghttp, and their website appears to have > last been updated in 2015. (<https://nghttp2.org/>) > > > > > > But to remove PHP from the equation. I've now peformed the following > test. > > > > 1. saved the generated content as a static fileA.html > > 2. changed to this line: <Files "fileA.html"> > > > > And after the test I still get the push. > > > > --Jose Stefan > > > > ------------------------------------------------------------------------ > > *From:* Paul <storm...@stormy.ca> > > *Sent:* Tuesday, October 24, 2023 12:55 PM > > *To:* users@httpd.apache.org <users@httpd.apache.org> > > *Subject:* Re: [users@httpd] Weird issue with "H2Push" combined with > > FilesMatch > > On 2023-10-24 11:31, Jose Stefan wrote: > >> Hello, > >> > >> I have a weird issue while using "H2Push". I'm turning it off, but > >> depending where it's nested it doesn't work as expected. Subset of > >> config shown at the end. I'm using version: 2.4.52-1ubuntu4.6 on Ubuntu > >> 22.04 LTS. > >> > >> With the code as presented, it still triggers a push for "fileC.css". I > >> expect NO push to happen as it is turned off before > >> the"H2PushResource..." line. > > > > Quick question, not a solution. Does you php (or other static > > environment) have any 'rel=preload'? > >> > >> Here's where I'm confused. I've performed the following individual > tests: > >> > >> * If I use the "H2Push off" outside of the FilesMatch (and comment the > >> one inside), The push doesn't happen. > >> * > >> If I use both "H2Push off" and "H2PushResource..." outside of the > >> FilesMatch (and comment the ones inside), The push doesn't happen. > >> * If I comment out the "H2PushResource..." inside the FilesMatch, the > >> push doesn't happen. Therefore, I know the config is hitting that > part. > >> > >> It's only when both lines are inside the FilesMatch that I don't get > the > >> expected results. Yet the context for h2push reads: > >> Context: server config, virtual host, directory, .htaccess > >> > >> The plan, eventually, is to enable just the early hints and not the > >> push. But I haven't even gotten to testing that part yet. My version of > >> httpd doesn't support "H2EarlyHint". > >> > >> Subset of the config: > >> ---------- > >> H2Push on > >> ... > >> <IfModule mod_ssl.c> > >> <VirtualHost *:443> > >> ... > >> <IfModule http2_module> > >> #H2EarlyHints on > >> #H2Push off > >> #H2PushResource /fileC.css > >> <FilesMatch "^(fileA|fileB)\.php$"> > >> H2Push off > >> H2PushResource /fileC.css > >> #H2EarlyHint ... Available in version 2.4.58 and > >> later. > >> </FilesMatch> > >> </IfModule> > >> ... > >> </VirtualHost> > >> </IfModule>... > >> > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > > For additional commands, e-mail: users-h...@httpd.apache.org > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > > Keep in mind that nghttp2 is a build requirement for HTTP/2, which was outlined in the threads pertaining to CVE 2033-44487. Testing with that tool should be fine.
