> > > > Status 500 means that some error happened during processing. > > Is there anything in the logs? Exceptions? > > The 500 was generated by a downstream Tomcat 8.5.11 server, this one is just trying to proxy the message.
> Maybe the browser closes the connection by its own decision, without > reading the response? (Thus a > org.apache.catalina.connector.ClientAbortException happens. I think it > may be logged as status 500). > > Usually you get an error on Tomcat when that happens > > If I see correctly, ProxyResponse copies the headers from somewhere > (from a proxied response?). > > Are those headers sane and correct? > > They're being proxied from the downstream server which is another tomcat. > E.g. "Transfer-Encoding: chunked" and "Content-Length" are mutually > exclusive, cannot be used at the same time, cannot be used more than > once. They should not be blindly copied. > Good question on that, I can take a look. I remove Content-Length from the downstream response but I'll also see if removing Transfer-Encoding helps. > > The status code is coped from somewhere. Does it have the expected value > (200)? > > In this case 500 is expected since input didn't pass validation. > Is the text in those headers (and status message) correct 7-bit > US-ASCII characters? > > > Can this be tested with a simple browser like Curl or Wget that can > log response headers? > Or a simple raw client (telnet, puTTY). > > i can see the headers in chrome and firefox. Nothing out of the ordinary. > > I do not see anything in changelog for 8.0.40-8.0.41 that could result > in such change in behaviour. Maybe configurations of the two systems > are different? > > No changes. I have a source2image process that builds the docker container https://github.com/TremoloSecurity/OpenUnisonS2IDocker so when a new version comes out i just up the version number to get it pulled. > Make sure that there are no duplicate jars in WEB-INF/lib. > Sometimes building a project pulls in several copies of the same > library, and the order of jars in WEB-INF/lib is random and depends on > version of Java. Thus you won't know what version wins. > > I don't think this is the issue since it happens ONLY on Post+500, not Post+200 > Do both systems use the same connector type (bio/nio/apr, ajp/http/https)? > > > both systems are using the same docker image base so exactly the same except for the webapp > Try running WireShark, to inspect network traffic? > https://www.wireshark.org/ encrypted so not good > > > Try running with a debugger? > https://wiki.apache.org/tomcat/FAQ/Developing#Debugging > > yes, i have verified that my code is sending the expected data to Tomcat, Tomcat is not doing anything with that data though. Thanks Marc
