Bug 14703 - RFC2817 - upgrading to TLS within HTTP/1.1
Summary: RFC2817 - upgrading to TLS within HTTP/1.1
Status: CLOSED FIXED
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: Core (show other bugs)
Version: 2.0.43
Hardware: All All
: P5 enhancement (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords: FAQ
Depends on:
Blocks:
 
Reported: 2002-11-20 10:14 UTC by Tony Sedlak
Modified: 2004-11-16 19:05 UTC (History)
0 users



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Tony Sedlak 2002-11-20 10:14:55 UTC
It looks that there is missing functionality in HTTP implementation in Apache -
no support for RFC2817.
Although it seems that there is already some support for HTTP switching protocol
- eg. definition for HTTP_SWITCHING_PROTOCOL - as this was already defined in
old RFC2616 - Apache is based on that rfc.

Without RFC2817 features it is impossible to setup name based virtual hosting
with SSL/TLS enabled - highly required nowdays.

Suggestions or am I wrong?
Comment 1 Jeff Trawick 2002-11-21 13:24:24 UTC
Not much software supports RFC2817.  It is not required for the web as
we know it.  It certainly is not "highly required nowdays."

Some of the known problems with RFC 2817 are listed here:

http://jis.mit.edu/pipermail/saag/2001q4/000253.html

Technically this is an "Enhancement" request, not a problem with "Major" severity.

Somebody did start playing with TLS upgrade support recently but they seem
to have lost interest.  See the archives of dev@httpd.apache.org for October 2002.
Comment 2 William A. Rowe Jr. 2002-11-23 07:35:45 UTC
  Question, what on earth do you plan to use to access the server using the
  RFC2817 behavior?  I ask because I'm sitting on Ryan Bloom's patch to enable
  the SSLEngine Upgrade directive.  It's simply not been committed because
  we need clients to test the behavior with (although I'm likely to commit
  just because there is some major SSL refactoring needed that will break that
  otherwise very useful patch.)
Comment 3 William A. Rowe Jr. 2002-12-30 17:54:17 UTC
  A new option has been added to the next iteration (release 2.2) of Apache
  to support SSLEngine (On|Off|Upgrade) to support Connection: upgrade requests.

  This feature is (almost) entirely untested, due to lack of client support.
  Additional pointers to supporting browsers would be greatly appreciated.