Bug#602957: apache2: Error when using mod_proxy from SSL virtual host to HTTP

[Petr Vyhnal <rudiik@simerion.net>]

Package: apache2.2-common
Version: 2.2.16-3
Severity: normal


I have SSL virtual host using mod_gnutls and there is configured proxy connection using mod_proxy & mod_proxy_http to HTTP site. Configuration worked fine on Lenny with patched mod_gnutls. Now after upgrade to Squeeze there is again problem with mod_proxy HTTPS->HTTP connections. As per logs it seems apache tries to establish SSL/TLS connection to HTTP proxied site - see errors below.

[Tue Nov 09 19:15:18 2010] [error] [client 127.0.0.1] GnuTLS: Handshake Failed. Hit Maximum Attempts
[Tue Nov 09 19:15:18 2010] [error] (103)Software caused connection abort: proxy: pass request body failed to 127.0.0.1:9091 (127.0.0.1)
[Tue Nov 09 19:15:18 2010] [error] proxy: pass request body failed to 127.0.0.1:9091 (127.0.0.1) from x.x.x.x ()

Proxy configuration in virtualhost:
        ProxyRequests Off
        <Proxy *>
            Order Allow,Deny
            Allow from all
        </Proxy>

        ProxyPass /transmission http://127.0.0.1:9091/transmission
        ProxyPassReverse /transmission http://127.0.0.1:9091/transmission



-- Package-specific info:
List of enabled modules from 'apache2 -M':
  alias auth_basic auth_digest authn_file authz_default
  authz_groupfile authz_host authz_user autoindex cgi dav_fs dav
  deflate dir env gnutls mime negotiation php5 proxy_http proxy
  reqtimeout rewrite scgi setenvif status
List of enabled php5 extensions:
  curl fileinfo gd imagick imap mcrypt mysql mysqli pdo pdo_mysql
  pdo_sqlite sqlite sqlite3

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apache2 depends on:
ii  apache2-mpm-prefork           2.2.16-3   Apache HTTP Server - traditional n
ii  apache2.2-common              2.2.16-3   Apache HTTP Server common files

apache2 recommends no packages.

apache2 suggests no packages.

Versions of packages apache2.2-common depends on:
ii  apache2-utils                 2.2.16-3   utility programs for webservers
ii  apache2.2-bin                 2.2.16-3   Apache HTTP Server common binary f
ii  libmagic1                     5.04-5     File type determination library us
ii  lsb-base                      3.2-23.1   Linux Standard Base 3.2 init scrip
ii  mime-support                  3.48-1     MIME files 'mime.types' & 'mailcap
ii  perl                          5.10.1-15  Larry Wall's Practical Extraction 
ii  procps                        1:3.2.8-9  /proc file system utilities

-- no debconf information