Bug#827472: apache2: mod_proxy_fcgi erroneously sends response body when issuing a 304
Package: apache2
Version: 2.4.10-10+deb8u4
Severity: normal
Tags: upstream
Dear Maintainer,
When apache communicates with a FastCGI server (like php-fpm) via
mod_proxy_fastcgi and the response contains a Last-Modified header with no
Status header and this results in a 304 Not Modified response (based on the
If-Modified-Since header of the HTTP request), apache sends to the client not
only the headers, but the body of the response too. This violates rfc2616
section 10.3.5: "The 304 response MUST NOT contain a message-body, and thus is
always terminated by the first empty line after the header fields."
Apart from causing issues with some reverse proxies, this also causes apache to
log a bogus error:
"AH01070: Error parsing script headers, referer:..."
for every request that results in a 304 response.
This bug was reported upstream in
https://bz.apache.org/bugzilla/show_bug.cgi?id=57198
and is fixed in 2.4.11, see
https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/modules/proxy/mod_proxy_fcgi.c?r1=1650677&r2=1650676&pathrev=1650677&view=patch
It would be useful to have this backported to the current apache2
package in jessie.
Thanks,
Giuseppe
Reply to: