[pkg-lighttpd] Bug#573171: lighttpd: $HTTP["url"] contains full URI when using GET https in lenny

Stefan Bühler lighttpd at stbuehler.de
Sat Mar 13 08:54:20 UTC 2010


Hi,

Johannes Weißl <jargon at molb.org> wrote:
> Package: lighttpd
> Version: 1.4.19-5+lenny1
> Severity: important
> 
> 
> $HTTP["url"] contains full URI (https://host:443/somefile) when using an
> https request like this:
> 
>     GET https://host:443/somefile HTTP/1.1
>     Host: host:443
> 
> while it should only contain "/somefile". It works if a relative path
> for GET is used or in unencrypted http.
> 
> It works in squeeze, so the bug is fixed somewhere between
> 1.4.19-5+lenny1 and 1.4.26. It is important because it breaks all
> $HTTP["url"] =~ "^... checks in the config.

see http://redmine.lighttpd.net/issues/show/1937, fixed in 1.4.24.

If you think every bug fix is important (as obviously every bug breaks 
something) you probably should use the latest release.





More information about the pkg-lighttpd-maintainers mailing list