From d835aba5673c155207e04c6bbb3a6547829dd9cb Mon Sep 17 00:00:00 2001 From: "Frank Ch. Eigler" Date: Fri, 20 Aug 2021 13:43:26 -0400 Subject: [PATCH] debuginfod proxies: preserve & pass %2F etc. Apache httpd by default blocks URL-encoded / (%2F) characters in the URL path, even though these are RFC-compliant. Enable them and permit their safe passage to the debuginfod servers. See also https://stackoverflow.com/a/9933890/661150 Signed-off-by: Frank Ch. Eigler --- playbooks/include/proxies-reverseproxy.yml | 2 +- .../reverseproxy/templates/reversepassproxy.debuginfod.conf | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml index 8c06d714aa..d8e0fd0494 100644 --- a/playbooks/include/proxies-reverseproxy.yml +++ b/playbooks/include/proxies-reverseproxy.yml @@ -776,7 +776,7 @@ destname: debuginfod # manage non-trivial reverse-proxy specs in template proxyurl: http://debuginfod01:8002 - proxyopts: "connectiontimeout=600 timeout=600 keepalive=on" + proxyopts: "connectiontimeout=600 timeout=600 keepalive=on nocanon" tags: - debuginfod diff --git a/roles/httpd/reverseproxy/templates/reversepassproxy.debuginfod.conf b/roles/httpd/reverseproxy/templates/reversepassproxy.debuginfod.conf index 0300d06b29..0c4b84352a 100644 --- a/roles/httpd/reverseproxy/templates/reversepassproxy.debuginfod.conf +++ b/roles/httpd/reverseproxy/templates/reversepassproxy.debuginfod.conf @@ -1,4 +1,6 @@ +AllowEncodedSlashes NoDecode + # Reverse-proxy /buildid/* queries ProxyPassMatch "^/buildid/(.*)$" "{{proxyurl}}/buildid/$1" {{proxyopts}}