Mantis - Resin
Viewing Issue Advanced Details
6054 minor always 05-05-17 11:02 07-20-17 14:03
wileysaw  
ferg  
normal  
closed 4.0.47  
fixed  
none    
none 4.0.54  
0006054: mod_caucho drops request parameters when used behind a SSL termination
Project that involves both Resin 4.x and WebSphere App Server 8.5.x

In front of both servers we have an IBM HTTP server configured with IBM WebSphere Plug-in and mod_caucho.

We have noticed that as long as mod_caucho is active, requests sent to WebSphere are stripped from parameters:

That means that a system out on HttpServletRequest.getParameterNames() in the WebSphere application, would return "" as long as mod_caucho is loaded in the front-end HTTP server.

mod_caucho would intefere in this scenario


INTERNET->HTTPS:443->SSL OFFLOADER->DMZ1->HTTP:80->HTTP SEVER (+mod_caucho + was_plugin)->DMZ2->HTTP:9080->WEBSPHERE SERVER (receives HTTP request with HTTP missing parameters)

mod_caucho would NOT intefere in this scenario:

INTERNET->HTTPS:443->SSL OFFLOADER->DMZ1->HTTPS:443->HTTP SEVER (+mod_caucho + was_plugin)->DMZ2->HTTP:9443->WEBSPHERE SERVER (receives HTTP request with HTTP missing parameters)
Additionally, I have verified that removing the mod_caucho and replacing it with a standard reverse proxy allowed me to correctly route request to both WebSphere and Resin

There are no notes attached to this issue.