Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 259474 - UltraDNS HTTP forwarding @ http://hardened.gentoo.org/ is not standards-compliant
Summary: UltraDNS HTTP forwarding @ http://hardened.gentoo.org/ is not standards-compl...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Infrastructure
Classification: Unclassified
Component: Other web server issues (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Mirror Admins
URL: http://hardened.gentoo.org/
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-18 13:53 UTC by Martin Walch
Modified: 2009-11-11 14:59 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Walch 2009-02-18 13:53:52 UTC
all these requests are equivalent conforming to rfc 2616 (HTTP/1.1) (CR LF omitted for better readability)

(1)
HEAD / HTTP/1.1
Host: hardened.gentoo.org

(2)
HEAD / HTTP/1.1
Host:hardened.gentoo.org

(3)
HEAD http://www.gentoo.org/ HTTP/1.1
Host: hardened.gentoo.org

(4)
HEAD / HTTP/1.1
Host: hardened.%67entoo.org

(5)
HEAD / HTTP/1.1
Host: hardened.gentoo.org:80

(6)
HEAD / HTTP/1.1
Host: hardened.gentoo.org:

Request (1) works fine (HTTP/1.1 301 Moved Permanently), all other fail (HTTP/1.1 404 Not Found).

As a consequence, hardened.gentoo.org may not be usable behind some proxies, with exotic clients, tools like net-analyzer/httping, self-written scripts or manual usage of telnet.

(www.gentoo.org works perfectly with corresponding requests)
Comment 1 Xavier Neys (RETIRED) gentoo-dev 2009-02-18 16:45:44 UTC
There's no hardened.gentoo.org site, it's only a redirect from UltraDNS, i.e. not a Gentoo server:

$ host hardened.gentoo.org
hardened.gentoo.org is an alias for crs.ultradns.net.
crs.ultradns.net has address 204.74.99.100

$ curl -I hardened.gentoo.org
HTTP/1.1 301 Moved Permanently
Date: Wed, 18 Feb 2009 17:28:32 GMT
Server: UltraDNS Client Redirection Server
Last-Modified: Wed, 18 Feb 2009 17:28:32 GMT
Accept-Ranges: none
Connection: close
Content-type: text/html
Location: http://www.gentoo.org/proj/en/hardened/
Comment 2 Martin Walch 2009-02-18 22:16:45 UTC
Yes, but still the redirect fails and gives the impression, as if hardened.gentoo.org was completely broken, because http://hardened.gentoo.org/ is the main portal for hardened. A working redirect is also expected from some ebuilds like e. g. app-misc/pax-utils (HOMEPAGE="http://hardened.gentoo.org/pax-utils.xml"). However, I just wanted to have this pointed out. Leaving RESOLVED CANTFIX.
Comment 3 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2009-02-19 01:52:18 UTC
Reopening to elevate to UltraDNS.
Comment 4 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2009-02-19 02:29:31 UTC
UltraDNS ticket filed. Confirmation to mirror-admin@ with Message-Id <20090219015818.DD36BB5CBC@smtp.gentoo.org>
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2009-02-24 00:05:40 UTC
Got a first response from UltraDNS. No resolution yet.
Comment 6 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2009-02-25 00:51:29 UTC
UltraDNS response:
> We have evaluated the results you submitted regarding our URL
> Forwarding product.  We are currently reviewing the redesign efforts
> to modify the behavior of the product for your redirection requirements
> and compliance standards.  We will keep you updated regarding
> the progress of our scheduling and development efforts to fix 
> this behavior.

So we're in for a wait of 1-3 months probably for their full development cycle.
Comment 7 Martin Walch 2009-11-11 13:09:23 UTC
I just tested all requests from above again. They all seem to work now. Therefore I set this bug to RESOLVED/FIXED now.
Comment 8 Jeremy Olexa (darkside) (RETIRED) archtester gentoo-dev Security 2009-11-11 14:59:56 UTC
(In reply to comment #7)
> I just tested all requests from above again. They all seem to work now.
> Therefore I set this bug to RESOLVED/FIXED now.
> 

Thanks.