Handling empty Host in HTTP Header

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

Handling empty Host in HTTP Header

Mani
Hi,

      We are using tomcat-8.5.34. One of our client code is sending a POST request with HTTP header parameter "Host", as an empty string. And 8.5.34 version of tomcat is rejecting the connection with a 400 Error. After debugging, we found that the parseHost API in org.apache.coyote.AbstractProcessor is throwing an InvalidArgumentException (Seems to be introduced in 8.5.31). Then we checked out the latest tomcat code from SVN and found that the issue has been already addressed ( https://bz.apache.org/bugzilla/show_bug.cgi?id=62739 ) . So, we hope, the fix would be available in 8.5.35.

May I know, when is the next official tomcat release planned? So that we can decide on how to handle this issue in our product.

Thanks,

Mani
Reply | Threaded
Open this post in threaded view
|

RE: Handling empty Host in HTTP Header

Caldarale, Charles R
> From: Mani [mailto:[hidden email]]
> Subject: Handling empty Host in HTTP Header

> May I know, when is the next official tomcat release planned?

Releases for Tomcat versions under active development (including the 8.5
leg) normally occur in the first week of each calendar month.  Last-minute
glitches can affect the schedule, of course.

  - Chuck


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.


smime.p7s (10K) Download Attachment
Reply | Threaded
Open this post in threaded view
|

RE: Handling empty Host in HTTP Header

Mani

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Saturday, October 27, 2018 7:08 PM, Caldarale, Charles R <[hidden email]> wrote:

> > From: Mani [mailto:[hidden email]]
> > Subject: Handling empty Host in HTTP Header
>
> > May I know, when is the next official tomcat release planned?
>
> Releases for Tomcat versions under active development (including the 8.5
> leg) normally occur in the first week of each calendar month. Last-minute
> glitches can affect the schedule, of course.
>
> -   Chuck
>
>     THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
>     MATERIAL and is thus for use only by the intended recipient. If you received
>     this in error, please contact the sender and delete the e-mail and its
>     attachments from all computers.
>


Thanks for the info Chuck..

Mani

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: Handling empty Host in HTTP Header

markt
In reply to this post by Caldarale, Charles R
On 27/10/18 14:38, Caldarale, Charles R wrote:
>> From: Mani [mailto:[hidden email]]
>> Subject: Handling empty Host in HTTP Header
>
>> May I know, when is the next official tomcat release planned?
>
> Releases for Tomcat versions under active development (including the 8.5
> leg) normally occur in the first week of each calendar month.  Last-minute
> glitches can affect the schedule, of course.

Note the October release never happened due to a combination of
ApacheCon, working on getting TRLSv1.3 support working, needing a Tomcat
Native release etc.

Currently, I don't see anything that would add delay to the November
release.

Mark

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: Handling empty Host in HTTP Header

Mani
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Saturday, October 27, 2018 8:52 PM, Mark Thomas <[hidden email]> wrote:

> On 27/10/18 14:38, Caldarale, Charles R wrote:
>
> > > From: Mani [mailto:[hidden email]]
> > > Subject: Handling empty Host in HTTP Header
> >
> > > May I know, when is the next official tomcat release planned?
> >
> > Releases for Tomcat versions under active development (including the 8.5
> > leg) normally occur in the first week of each calendar month. Last-minute
> > glitches can affect the schedule, of course.
>
> Note the October release never happened due to a combination of
> ApacheCon, working on getting TRLSv1.3 support working, needing a Tomcat
> Native release etc.
>
> Currently, I don't see anything that would add delay to the November
> release.
>
> Mark
>
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>
> To unsubscribe, e-mail: [hidden email]
> For additional commands, e-mail: [hidden email]


Thanks Mark.


Mani

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: Handling empty Host in HTTP Header

Mani


‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Sunday, October 28, 2018 8:33 AM, Mani <[hidden email]> wrote:

> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> On Saturday, October 27, 2018 8:52 PM, Mark Thomas [hidden email] wrote:
>
> > On 27/10/18 14:38, Caldarale, Charles R wrote:
> >
> > > > From: Mani [mailto:[hidden email]]
> > > > Subject: Handling empty Host in HTTP Header
> > >
> > > > May I know, when is the next official tomcat release planned?
> > >
> > > Releases for Tomcat versions under active development (including the 8.5
> > > leg) normally occur in the first week of each calendar month. Last-minute
> > > glitches can affect the schedule, of course.
> >
> > Note the October release never happened due to a combination of
> > ApacheCon, working on getting TRLSv1.3 support working, needing a Tomcat
> > Native release etc.
> > Currently, I don't see anything that would add delay to the November
> > release.
> > Mark
> >
> > To unsubscribe, e-mail: [hidden email]
> > For additional commands, e-mail: [hidden email]
>
> Thanks Mark.
>
> Mani


Hi,
   Just curious to know.. Any ideas on the release dates for tomcat 8.5.35?

Mani

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]

Reply | Threaded
Open this post in threaded view
|

Re: Handling empty Host in HTTP Header

Christopher Schultz-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Mani,

On 11/6/18 23:30, Mani wrote:

>
>
> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Sunday, October 28, 2018 8:33
> AM, Mani <[hidden email]> wrote:
>
>> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Saturday, October 27, 2018
>> 8:52 PM, Mark Thomas [hidden email] wrote:
>>
>>> On 27/10/18 14:38, Caldarale, Charles R wrote:
>>>
>>>>> From: Mani
>>>>> [mailto:[hidden email]]
>>>>> Subject: Handling empty Host in HTTP Header
>>>>
>>>>> May I know, when is the next official tomcat release
>>>>> planned?
>>>>
>>>> Releases for Tomcat versions under active development
>>>> (including the 8.5 leg) normally occur in the first week of
>>>> each calendar month. Last-minute glitches can affect the
>>>> schedule, of course.
>>>
>>> Note the October release never happened due to a combination
>>> of ApacheCon, working on getting TRLSv1.3 support working,
>>> needing a Tomcat Native release etc. Currently, I don't see
>>> anything that would add delay to the November release. Mark
>>>
>>> To unsubscribe, e-mail: [hidden email] For
>>> additional commands, e-mail: [hidden email]
>>
>> Thanks Mark.
>>
>> Mani
>
>
> Hi, Just curious to know.. Any ideas on the release dates for
> tomcat 8.5.35?

Have a look at the recent posts to the dev@ list. Search for "8.5.35".

- -chris
-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/
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=7EB3
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: [hidden email]
For additional commands, e-mail: [hidden email]