Mantis Bugtracker
  

Viewing Issue Advanced Details Jump to Notes ] View Simple ] Issue History ] Print ]
ID Category Severity Reproducibility Date Submitted Last Update
0002145 [Resin] trivial always 11-06-07 14:07 11-06-07 14:16
Reporter stbu View Status public  
Assigned To ferg
Priority normal Resolution fixed Platform
Status closed   OS
Projection none   OS Version
ETA none Fixed in Version 3.1.4 Product Version 3.1.4
  Product Build
Summary 0002145: Snapshot resin-pro-3.1.s071106: Default resin.conf contains "resin_admin_non_ssl" instead of "resin_admin_external"
Description The default $RESIN_HOME/conf/resin.conf in distribution "resin-pro-3.1.s071106" contains

...
      <web-app id="/resin-admin" root-directory="${resin.home}/php/admin">
        <!--
           - Administration application /resin-admin
           -
           - password is the md5 hash of the password.
           - localhost is true to limit access to the localhost
          -->
        <prologue>
          <resin:set var="resin_admin_user" value=""/>
          <resin:set var="resin_admin_password" value=""/>
          <resin:set var="resin_admin_external" value="false"/>
          <resin:set var="resin_admin_non_ssl" value="true"/>
        </prologue>
      </web-app>
...

The variable "resin_admin_non_ssl" is wrong and it should be "resin_admin_insecure"
at least accordingly to $RESIN_HOME/php/admin/WEB-INF/resin-web.xml which checks for this:

...
    <resin:if test="${! resin_admin_insecure}">
      <user-data-constraint transport-guarantee="CONFIDENTIAL"/>
    </resin:if>
...


So, currently accessing http://localhost:8080/resin-admin [^] will send the redirect

HTTP/1.1 302 Found
Server: Resin/3.1.s071106
Location: https://localhost:8080/resin-admin/ [^]
Content-Type: text/html
Content-Length: 73
Date: Tue, 06 Nov 2007 22:00:13 GMT


Furthermore, the console output of Resin displays:
The URL contains escaped bytes unsupported by the UTF-8 encoding.


Enabling FINEST Logging gives additional details:

http://localhost:8080 [^] /resin-admin FINEST com.caucho.server.webapp.WebApp (getRealPath) real-path /index.jsp -> C:\test\resin-pro-3.1.s071106\php\admin\index.jsp
http://localhost:8080 [^] /resin-admin FINEST com.caucho.server.webapp.WebApp (getRealPath) real-path /index.php -> C:\test\resin-pro-3.1.s071106\php\admin\index.php
http://localhost:8080 [^] /resin-admin FINE com.caucho.server.dispatch.ServletMapper (mapServlet) invoke (uri:/index.php -> resin-php)
http://localhost:8080 [^] /resin-admin FINE com.caucho.server.connection.AbstractHttpResponse (writeHeadersInt) Http[1] HTTP/1.1 302 Found
http://localhost:8080 [^] /resin-admin FINE com.caucho.server.connection.AbstractHttpResponse (writeHeadersInt) Http[1] Location: https://localhost:8080/resin-admin/ [^]
http://localhost:8080 [^] /resin-admin FINE com.caucho.server.connection.AbstractHttpResponse (writeHeadersInt) Http[1] Content-Type: text/html
http://localhost:8080 [^] /resin-admin FINE com.caucho.server.connection.AbstractHttpResponse (writeHeadersInt) Http[1] Content-Length: 73
http://localhost:8080 [^] /resin-admin FINE com.caucho.server.connection.ResponseStream (writeNext) Http[1] write-chunk(73)
  FINE com.caucho.server.http.HttpRequest (handleRequest) Http[1] keepalive
  FINE com.caucho.server.port.TcpConnection (initSocket) Tcp[,8] starting connection TcpConnection[id=http--8080-8,socket=QSocketWrapper[Socket[addr=/0:0:0:0:0:0:0:1,port=1041,localport=8080]],port=Port[null:8080]], total=6
  FINE com.caucho.server.port.TcpConnection (keepalive) Tcp[,1] keepalive (thread)
  FINE com.caucho.server.http.HttpRequest (handleRequest) Http[8] 
  FINE com.caucho.server.http.HttpRequest (handleRequest) Http[8] Remote-IP: 0:0:0:0:0:0:0:1:1041
  FINE com.caucho.server.http.HttpRequest (handleRequest) com.caucho.server.dispatch.BadRequestException: The URL contains escaped bytes unsupported by the UTF-8 encoding.
    at com.caucho.server.dispatch.InvocationDecoder.normalizeUriEscape(InvocationDecoder.java:448)
    at com.caucho.server.dispatch.InvocationDecoder.splitQueryAndUnescape(InvocationDecoder.java:191)
    at com.caucho.server.http.HttpRequest.handleRequest(HttpRequest.java:247)
    at com.caucho.server.port.TcpConnection.run(TcpConnection.java:592)
    at com.caucho.util.ThreadPool$Item.runTasks(ThreadPool.java:690)
    at com.caucho.util.ThreadPool$Item.run(ThreadPool.java:612)
    at java.lang.Thread.run(Thread.java:619)

  WARNING com.caucho.server.webapp.ErrorPageManager (sendServletError) The URL contains escaped bytes unsupported by the UTF-8 encoding.

Steps To Reproduce
Additional Information Windows XP, Java 1.6.0_02-b06, 32, mixed mode, Cp1252, de, Sun Microsystems Inc.
using also IPv6

Browser: Internet Explorer 7
just for the case it's relevant for the "The URL contains escaped bytes unsupported by the UTF-8 encoding." issue.
Attached Files

- Relationships

- Notes
(0002455)
ferg
11-06-07 14:16

The "unescaped bytes" thing is because the browser is sending a SSL request.

Since the default value for resin_admin_insecure is false, the admin will redirect to SSL.
 

- Issue History
Date Modified Username Field Change
11-06-07 14:07 stbu New Issue
11-06-07 14:07 stbu Issue Monitored: stbu
11-06-07 14:16 ferg Note Added: 0002455
11-06-07 14:16 ferg Assigned To  => ferg
11-06-07 14:16 ferg Status new => closed
11-06-07 14:16 ferg Resolution open => fixed
11-06-07 14:16 ferg Fixed in Version  => 3.1.4


Mantis 1.0.0rc3[^]
Copyright © 2000 - 2005 Mantis Group
30 total queries executed.
26 unique queries executed.
Powered by Mantis Bugtracker