Re: is the "https" patch necessary

Peter Conrad <[email protected]> Wed, 6 Mar 2002 09:52:33 +0100
Newsgroups gmane.comp.djb.publicfile
Message-ID <[email protected]>
Hi,

On Tue, Mar 05, 2002 at 10:32:21AM -0600, [email protected] wrote:
> To run a stunneled httpd on the https port in the
> /publics directory---after running configure---I change the run file to
> 
> #!/bin/sh
> exec 2>&1
> exec envuidgid root softlimit -o20 -d50000 tcpserver -vDRHl0 -b50 -c100 0 443 stunnel -f -l /usr/local/publicfile/bin/httpd  -- httpds /publics/file
> 
> This works for me with an _unpatched_ httpd as well.  

That depends on the client you're using. Some clients (like Netscape I think)
will issue requests like this:

GET /some/path/file.html HTTP/1.0
Server: www.example.org

while others will use requests like this:

GET https://www.example.org/some/path/file.html HTTP/1.0

The former will work with the unpatched publicfile, the latter won't.

Bye,
	Peter
-- 
Peter Conrad                        Tel: +49 6102 / 80 99 072
[ t]ivano Software GmbH             Fax: +49 6102 / 80 99 071
Bahnhofstr. 18
63263 Neu-Isenburg