February 2020 - mod_cluster-issues

[JBoss JIRA] (MODCLUSTER-714) support secret="secret" in AJP nodes

by Jean-Frederic Clere (Jira)

[ https://issues.redhat.com/browse/MODCLUSTER-714?page=com.atlassian.jira.p... ] Jean-Frederic Clere updated MODCLUSTER-714: ------------------------------------------- Status: Pull Request Sent (was: Open) Git Pull Request: https://github.com/modcluster/mod_proxy_cluster/pull/25 > support secret="secret" in AJP nodes > ------------------------------------ > > Key: MODCLUSTER-714 > URL: https://issues.redhat.com/browse/MODCLUSTER-714 > Project: mod_cluster > Issue Type: Bug > Reporter: Jean-Frederic Clere > Assignee: Jean-Frederic Clere > Priority: Major > > The CVE-2020-1938 "mitigation" forces the use of a secret between httpd and the back-end. > <Connector port = "8009" > protocol = "AJP / 1.3" > redirectPort = "8443" > address = "YOUR_TOMCAT_IP_ADDRESS" > requiredSecret = "YOUR_TOMCAT_AJP_SECRET" /> > Actually secret="secret" is support in mod_proxy_ajp but not in mod_cluster. > That prevents use using the mitigation. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 9 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-714) support secret="secret" in AJP nodes

by Jean-Frederic Clere (Jira)

[ https://issues.redhat.com/browse/MODCLUSTER-714?page=com.atlassian.jira.p... ] Jean-Frederic Clere reassigned MODCLUSTER-714: ---------------------------------------------- Assignee: Jean-Frederic Clere (was: Radoslav Husar) > support secret="secret" in AJP nodes > ------------------------------------ > > Key: MODCLUSTER-714 > URL: https://issues.redhat.com/browse/MODCLUSTER-714 > Project: mod_cluster > Issue Type: Bug > Reporter: Jean-Frederic Clere > Assignee: Jean-Frederic Clere > Priority: Major > > The CVE-2020-1938 "mitigation" forces the use of a secret between httpd and the back-end. > <Connector port = "8009" > protocol = "AJP / 1.3" > redirectPort = "8443" > address = "YOUR_TOMCAT_IP_ADDRESS" > requiredSecret = "YOUR_TOMCAT_AJP_SECRET" /> > Actually secret="secret" is support in mod_proxy_ajp but not in mod_cluster. > That prevents use using the mitigation. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 9 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-714) support secret="secret" in AJP nodes

by Jean-Frederic Clere (Jira)

[ https://issues.redhat.com/browse/MODCLUSTER-714?page=com.atlassian.jira.p... ] Jean-Frederic Clere updated MODCLUSTER-714: ------------------------------------------- Summary: support secret="secret" in AJP nodes (was: support secret="scret" in AJP nodes) > support secret="secret" in AJP nodes > ------------------------------------ > > Key: MODCLUSTER-714 > URL: https://issues.redhat.com/browse/MODCLUSTER-714 > Project: mod_cluster > Issue Type: Bug > Reporter: Jean-Frederic Clere > Assignee: Radoslav Husar > Priority: Major > > The CVE-2020-1938 "mitigation" forces the use of a secret between httpd and the back-end. > <Connector port = "8009" > protocol = "AJP / 1.3" > redirectPort = "8443" > address = "YOUR_TOMCAT_IP_ADDRESS" > requiredSecret = "YOUR_TOMCAT_AJP_SECRET" /> > Actually secret="secret" is support in mod_proxy_ajp but not in mod_cluster. > That prevents use using the mitigation. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 9 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-714) support secret="scret" in AJP nodes

by Jean-Frederic Clere (Jira)

Jean-Frederic Clere created MODCLUSTER-714: ---------------------------------------------- Summary: support secret="scret" in AJP nodes Key: MODCLUSTER-714 URL: https://issues.redhat.com/browse/MODCLUSTER-714 Project: mod_cluster Issue Type: Bug Reporter: Jean-Frederic Clere Assignee: Radoslav Husar The CVE-2020-1938 "mitigation" forces the use of a secret between httpd and the back-end. <Connector port = "8009" protocol = "AJP / 1.3" redirectPort = "8443" address = "YOUR_TOMCAT_IP_ADDRESS" requiredSecret = "YOUR_TOMCAT_AJP_SECRET" /> Actually secret="secret" is support in mod_proxy_ajp but not in mod_cluster. That prevents use using the mitigation. -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 9 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-580) EnableWsTunnel enables only ws comunication

by Jean-Frederic Clere (Jira)

[ https://issues.redhat.com/browse/MODCLUSTER-580?page=com.atlassian.jira.p... ] Jean-Frederic Clere updated MODCLUSTER-580: ------------------------------------------- Status: Pull Request Sent (was: Open) Git Pull Request: https://github.com/modcluster/mod_cluster/pull/436 > EnableWsTunnel enables only ws comunication > ------------------------------------------- > > Key: MODCLUSTER-580 > URL: https://issues.redhat.com/browse/MODCLUSTER-580 > Project: mod_cluster > Issue Type: Bug > Components: Native (httpd modules) > Affects Versions: 1.3.5.Final > Reporter: Bogdan Sikora > Assignee: Jean-Frederic Clere > Priority: Major > > WebSocket configuration for apache httpd (EnableWsTunnel) balancer enables only ws communication, but undertow as balancer enables both http and ws. > {noformat} > # mod_proxy_balancer should be disabled when mod_cluster is used > LoadModule proxy_cluster_module modules/mod_proxy_cluster.so > LoadModule cluster_slotmem_module modules/mod_cluster_slotmem.so > LoadModule manager_module modules/mod_manager.so > LoadModule advertise_module modules/mod_advertise.so > MemManagerFile /mnt/hudson_workspace/mod_cluster/jbcs-httpd24-2.4/httpd/cache/mod_cluster > ServerName dev89:2080 > EnableWsTunnel > LogLevel warn > <IfModule manager_module> > Listen 10.19.70.244:8747 > <VirtualHost 10.19.70.244:8747> > <Directory /> > Require all granted > </Directory> > ServerAdvertise on > EnableMCPMReceive > <Location /mcm> > SetHandler mod_cluster-manager > Require all granted > </Location> > AdvertiseGroup 224.0.5.244:55918 > AdvertiseBindAddress 10.19.70.244:55918 > KeepAliveTimeout 60 > MaxKeepAliveRequests 0 > ServerAdvertise on > AdvertiseFrequency 5 > ManagerBalancerName qacluster > </VirtualHost> > </IfModule> > {noformat} > Worker joins with > {noformat} > <h1> Node jboss-eap-7.1 (ws://10.19.70.244:8080): </h1> > {noformat} > and all http comunication ends with > {noformat} > <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> > <html><head> > <title>500 Internal Server Error</title> > </head><body> > <h1>Internal Server Error</h1> > <p>The server encountered an internal error or > misconfiguration and was unable to complete > your request.</p> > <p>Please contact the server administrator at > Administrator@localhost to inform them of the time this error occurred, > and the actions you performed just before this error.</p> > <p>More information about this error may be available > in the server error log.</p> > <hr> > <address>Apache/2.4.23 (Red Hat) Server at 10.19.70.244 Port 2080</address> > </body></html> > {noformat} > And log message > {noformat} > [Sat Apr 08 16:21:29.335633 2017] [proxy:warn] [pid 12680] [client 10.19.70.244:55922] AH01144: No protocol handler was valid for the URL /clusterbench/jvmroute. If you are using a DSO version of mod_proxy, make sure the proxy submodules are included in the configuration using LoadModule. > {noformat} -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 10 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-713) error when build with httpd configure with --enable-maintainer-mode

by Radoslav Husar (Jira)

[ https://issues.redhat.com/browse/MODCLUSTER-713?page=com.atlassian.jira.p... ] Radoslav Husar reassigned MODCLUSTER-713: ----------------------------------------- Assignee: Jean-Frederic Clere (was: Radoslav Husar) > error when build with httpd configure with --enable-maintainer-mode > ------------------------------------------------------------------- > > Key: MODCLUSTER-713 > URL: https://issues.redhat.com/browse/MODCLUSTER-713 > Project: mod_cluster > Issue Type: Bug > Components: Native (httpd modules) > Reporter: Jean-Frederic Clere > Assignee: Jean-Frederic Clere > Priority: Major > > you will get errors like: > +++ > ../include/node.h:241:1: error: function declaration isn’t a prototype [-Werror=strict-prototypes] > 241 | void (*lock_nodes)(); > +++ > or: > +++ > mod_proxy_cluster.c:2965:6: error: no previous prototype for ‘remove_session_route’ [-Werror=missing-prototypes] > 2965 | void remove_session_route(request_rec *r, const char *name) > | ^~~~~~~~~~~~~~~~~~~~ > +++ > or: > mod_proxy_cluster.c:3360:17: error: ‘strncpy’ specified bound 80 equals destination size [-Werror=stringop-truncation] > 3360 | strncpy(ou.JVMRoute, route, JVMROUTESZ); > | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 10 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-713) error when build with httpd configure with --enable-maintainer-mode

by Jean-Frederic Clere (Jira)

Jean-Frederic Clere created MODCLUSTER-713: ---------------------------------------------- Summary: error when build with httpd configure with --enable-maintainer-mode Key: MODCLUSTER-713 URL: https://issues.redhat.com/browse/MODCLUSTER-713 Project: mod_cluster Issue Type: Bug Components: Native (httpd modules) Reporter: Jean-Frederic Clere Assignee: Radoslav Husar you will get errors like: +++ ../include/node.h:241:1: error: function declaration isn’t a prototype [-Werror=strict-prototypes] 241 | void (*lock_nodes)(); +++ or: +++ mod_proxy_cluster.c:2965:6: error: no previous prototype for ‘remove_session_route’ [-Werror=missing-prototypes] 2965 | void remove_session_route(request_rec *r, const char *name) | ^~~~~~~~~~~~~~~~~~~~ +++ or: mod_proxy_cluster.c:3360:17: error: ‘strncpy’ specified bound 80 equals destination size [-Werror=stringop-truncation] 3360 | strncpy(ou.JVMRoute, route, JVMROUTESZ); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 10 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-712) drop support of httpd-2.2.x in branch 1.3.x

by Jean-Frederic Clere (Jira)

[ https://issues.redhat.com/browse/MODCLUSTER-712?page=com.atlassian.jira.p... ] Jean-Frederic Clere commented on MODCLUSTER-712: ------------------------------------------------ [jfclere@dhcp-144-218 mod_proxy_cluster]$ grep AP_MODULE_MAGIC_AT_LEAST *.c | wc -l 100 there are far too many on very old version supported. > drop support of httpd-2.2.x in branch 1.3.x > ------------------------------------------- > > Key: MODCLUSTER-712 > URL: https://issues.redhat.com/browse/MODCLUSTER-712 > Project: mod_cluster > Issue Type: Bug > Components: Native (httpd modules) > Affects Versions: 1.3.12.Final > Reporter: Jean-Frederic Clere > Assignee: Jean-Frederic Clere > Priority: Major > Fix For: 1.3.13.Final > > > Per httpd.apache.org 2.2.x is out of support since 2017... Time to clean -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 10 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-712) drop support of httpd-2.2.x in branch 1.3.x

by Jean-Frederic Clere (Jira)

[ https://issues.redhat.com/browse/MODCLUSTER-712?page=com.atlassian.jira.p... ] Jean-Frederic Clere reassigned MODCLUSTER-712: ---------------------------------------------- Assignee: Jean-Frederic Clere (was: Radoslav Husar) > drop support of httpd-2.2.x in branch 1.3.x > ------------------------------------------- > > Key: MODCLUSTER-712 > URL: https://issues.redhat.com/browse/MODCLUSTER-712 > Project: mod_cluster > Issue Type: Bug > Components: Native (httpd modules) > Affects Versions: 1.3.12.Final > Reporter: Jean-Frederic Clere > Assignee: Jean-Frederic Clere > Priority: Major > Fix For: 1.3.13.Final > > > Per httpd.apache.org 2.2.x is out of support since 2017... Time to clean -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 10 months

1
0
0 / 0

[JBoss JIRA] (MODCLUSTER-712) drop support of httpd-2.2.x in branch 1.3.x

by Jean-Frederic Clere (Jira)

Jean-Frederic Clere created MODCLUSTER-712: ---------------------------------------------- Summary: drop support of httpd-2.2.x in branch 1.3.x Key: MODCLUSTER-712 URL: https://issues.redhat.com/browse/MODCLUSTER-712 Project: mod_cluster Issue Type: Bug Components: Native (httpd modules) Affects Versions: 1.3.12.Final Reporter: Jean-Frederic Clere Assignee: Radoslav Husar Fix For: 1.3.13.Final Per httpd.apache.org 2.2.x is out of support since 2017... Time to clean -- This message was sent by Atlassian Jira (v7.13.8#713008)

4 years, 10 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

mod_cluster-issues February 2020