Bug 61986 - POST Data Lost between Apache and Tomcat
Summary: POST Data Lost between Apache and Tomcat
Status: NEW
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: All (show other bugs)
Version: 2.4.29
Hardware: HP All
: P2 major (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
Depends on:
Reported: 2018-01-10 09:01 UTC by Mourad Mahouachi
Modified: 2018-01-15 14:18 UTC (History)
0 users

Apache configuration file (20.17 KB, text/plain)
2018-01-10 11:19 UTC, Mourad Mahouachi
Apache SSL configuration (13.19 KB, text/plain)
2018-01-10 11:19 UTC, Mourad Mahouachi
Request before and after passing through Apache (12.45 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet)
2018-01-11 16:55 UTC, Mourad Mahouachi

Note You need to log in before you can comment on or make changes to this bug.
Description Mourad Mahouachi 2018-01-10 09:01:10 UTC
We have a configuration with an Apache 2.4.29 and a Tomcat 7.0.82. 
Some POST submits end up in the Servlet with it's parameters empty.
Mind that the issue doesn't occur on older build 2.2.10.

I see many bug reports on the issue marking it as resolved but unfottunatly not the case.
Comment 1 Luca Toscano 2018-01-10 09:34:15 UTC
Hi Mourad,

we'd need more data to figure out if this is a misconfiguration or a real bug of httpd (the former is better handled in our users@ mailing list rather than in here).

I have some questions for you:

1) Can you share your httpd configuration?

2) Can you also share an example of POST that gets emptied? What do you mean with "its parameters are empty" ?
Comment 2 Mourad Mahouachi 2018-01-10 11:19:29 UTC
Created attachment 35667 [details]
Apache configuration file
Comment 3 Mourad Mahouachi 2018-01-10 11:19:48 UTC
Created attachment 35668 [details]
Apache SSL configuration
Comment 4 Mourad Mahouachi 2018-01-10 11:21:46 UTC
Here is the log of what we think is the trigger of the issue :

[08/Jan/2018:17:10:35 +0100] TLSv1.2 ECDHE-RSA-AES256-SHA384 "POST /Application/automate HTTP/1.1" 9498
[08/Jan/2018:17:10:36 +0100] TLSv1.2 ECDHE-RSA-AES256-SHA384 "GET /Application/Om.jsp?VPN=0&TYPE=4&MSG=Utilisateur%20ou%20domaine%20inconnu&SHP=0.6350878708019199 HTTP/1.1" 1288
[08/Jan/2018:17:10:46 +0100] TLSv1.2 ECDHE-RSA-AES256-SHA384 "-" -
[08/Jan/2018:17:10:46 +0100] TLSv1.2 ECDHE-RSA-AES256-SHA384 "-" –
Comment 5 Mourad Mahouachi 2018-01-10 11:22:09 UTC
Please find attached the configuration files.
Comment 6 Mourad Mahouachi 2018-01-10 11:35:28 UTC
Just adding, we thought the issue was linked to the jk mod so we switched to proxy mod, but the issue was still happening.
Comment 7 Luca Toscano 2018-01-10 11:49:33 UTC
Hi Mourad,

it is still not clear to me, reading what you have posted, what is the issue. Can you please state exactly what is the result that you'd expect and what is the one that you are getting?
Comment 8 Mourad Mahouachi 2018-01-11 16:55:13 UTC
Hi, I'm sorry if I wasn't clear enough. Let me rephrase the issue :

Apache 2.4.29 is listening on port 80 and forwarding requests to a servlet running on Tomcat 7.0.82 on port 8080 using mod_jk.
Sometimes when the HTTP client sends a request containing POST form data and tomcat receives the request, POST request form data is lost.

Please find attached an excel file containing a POST submitted and the log intercepted in the Servlet in Tomcat first filter where we see that the data is not defined.
Comment 9 Mourad Mahouachi 2018-01-11 16:55:52 UTC
Created attachment 35674 [details]
Request before and after passing through Apache
Comment 10 Luca Toscano 2018-01-15 14:18:18 UTC
(In reply to Mourad Mahouachi from comment #9)
> Created attachment 35674 [details]
> Request before and after passing through Apache

Could you please send this in a regular plaintext file rather than an excel one?