Article delegate-en/4742 of [1-5169] on the server localhost:119
  upper oldest olders older1 this newer1 newers latest
search
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
[Reference:<_A4736@delegate-en.ML_>]
Newsgroups: mail-lists.delegate-en

[DeleGate-En] Re: errors when URL is very long
02 Mar 2010 08:06:45 GMT feedback@delegate.org (Yutaka Sato)
The DeleGate Project


Hi,

In message <_A4736@delegate-en.ML_> on 02/03/10(23:53:59)
you chris <pqajabdyi-uwzfv3mteylr.ml@ml.delegate.org> wrote:
 |I am using DeleGate as MITM proxy in order to inspect HTTPS connections,
 |using the following command:
 |
 | delegated -r -P8042  ADMIN=root SERVER=https://1.2.3.4 STLS=mitm
 |
 |This works fine in most cases. However, when I use very long URLs,
 |DeleGate runs into some errors:
 |
 |
 |02/03 14:17:49 [11001]-P8042 builtin-SSLway: ssl_acc() failed
 |02/03 14:19:55 [11012]-P18043 FATAL: gzread(41)=0/0 eof=1 1 <fd:41>:
 |stream end 0

The lines above seems showing some error but does not correspond to
your problem this time.

 |02/03 14:19:58 [11029]-P18042 VStr overflow in wordscanX
 |(9.9.6:cgi._.c:1317) 1024/1024/1024 BF876F58-BF877357-BF877357
 |"/urlurlurlurlurlurlurlurlurlurl[...]

This line shows that CFI_makeEnv() at cgi.c:1317 in DeleGate/9.9.6
causes the error on the way trying to get some sub-string at the
top of the request url (for possiblly needed matching for CFI) into
a buffer of 1024 bytes.  This error message should be suppressed but
is not serious anyway.

 |02/03 14:19:59 [11029]-P18042 Suspicious HTTP header
 |[localhost][CTL=0,BIN=0,LEN=1113] Referer:
 |https://1.2.3.4/urlurlurlurlurlurlurlurlurlurl[...]

This is a general warning of HTTP-DeleGate to notify a detection
of some strange access.  It records a request with long URL, longer
than 1024 bytes by default.  You can change the length as follows
for example:

  MAXIMA=warn-reqline:16k


 |Although include/url.h defines the maximum URL length to 16kbyte, I
 |guess there is an issue with too long URLs. Could you please help me out
 |with this problem?

Cheers,
Yutaka
--
  9 9   Yutaka Sato <y.sato@delegate.org> http://delegate.org/y.sato/
 ( ~ )  National Institute of Advanced Industrial Science and Technology
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller

  admin search upper oldest olders older1 this newer1 newers latest
[Top/Up] [oldest] - [Older+chunk] - [Newer+chunk] - [newest + Check]
@_@V