Eliminating POST Variables

------=_Part_6164_28799990.1144766405381
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

I am running a virtual host in Apache 2.0.55 using mod_ssl + OpenSSL
0.9.8aon Win 2k3 Server. It seems to truncate POST requests that
exceed a few
kilobytes.

Here is the scenario: Apache uses a rewrite / proxy rule to forward
requests to Zope:
RewriteRule /(.*)
http://localhost:8080/VirtualHostBase/https/denproduction.fq dn:443/VirtualH=
ostRoot/$1
[P,L]<http://localhost:8080/VirtualHostBase/https/denproduction.fqdn:443/Vi=
rtualHostRoot/$1%5BP,L%5D>
When this rule is applied to the Virtual Host on the secure port 443, there
is a limit to the size of the request variables that it will forward to
Zope. When it is applied to the Apache globally and requests are done over
port 80, any size variables will be passed to Zope. The large requests are
XML files, so I tried unsetting the LimitXMLRequestBody directive.

Here is my virtual host configuration:

<VirtualHost *:443>

ServerName denproduction.fqdn:443
ServerAdmin wdyk [at] fqdn
TransferLog logs/access_log

LimitXMLRequestBody 0

SSLEngine on
ServerName denproduction.fqdn

DocumentRoot C:/Apache2/htdocs
ErrorLog logs/ssl_error_log

SSLCipherSuite
ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+e NULL

SSLCertificateFile ssl/denproduction.cert
SSLCertificateKeyFile ssl/denproduction.key

SSLOptions +StdEnvVars +CompatEnvVars

SetEnvIf User-Agent ".*MSIE.*" \
nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log \
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

# Rewrite Rules for Zope

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteLog C:/Apache2/logs/rewrite.log
RewriteLogLevel 0
# Default to route everything to Zope
# If the path starts with /local, then just server Apache's root
RewriteRule ^/test/ - [L]
RewriteRule /(.*)
http://localhost:8080/VirtualHostBase/https/denproduction.fq dn:443/VirtualH=
ostRoot/$1
[P,L]<http://localhost:8080/VirtualHostBase/https/denproduction.fqdn:443/Vi=
rtualHostRoot/$1%5BP,L%5D>
</IfModule>

</VirtualHost>

The problem has occurred when I make POST requests from the Python client
that I am writing, as well as when I am managing large python scripts
through the Zope management interface over SSL.

Any pointers are appreciated!

Wes Dyk, Production Systems Analyst
Noble Energy Production, Inc.

------=_Part_6164_28799990.1144766405381
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

I am running a virtual host in Apache
2.0.55 using mod_ssl + OpenSSL 0.9.8a on Win 2k3 Server. It seems
to truncate POST requests that exceed a few kilobytes.
 
 Here is the scenario: Apache=
uses
a rewrite / proxy rule to forward requests to Zope: 
 Rewrit=
eRule
/(.*) <a href=3D"http://localhost:8080/VirtualHostBase/https/denproduction.=
fqdn:443/VirtualHostRoot/$1%5BP,L%5D" target=3D"_blank" onclick=3D"return t=
op.js.OpenExtLink(window,event,this)">http://localhost:8080/ VirtualHostBase=
/https/denproduction.fqdn:443/VirtualHostRoot/$1
[P,L]</a>
 When this rule is applied to the V=
irtual
Host on the secure port 443, there is a limit to the size of the request
variables that it will forward to Zope. When it is applied to the
Apache globally and requests are done over port 80, any size variables
will be passed to Zope. The large requests are XML
files, so I tried unsetting the LimitXMLRequestBody directive. </font=
>
 
 Here is my virtual host configurat=
ion:
 
 <VirtualHost *:443>
 
 ServerName denproduction.fqdn:443<=
/font>
 ServerAdmin wdyk [at] fqdn
 TransferLog logs/access_log
 
 LimitXMLRequestBody 0
 
 SSLEngine on
 ServerName denproduction.fqdn</fon=
t>
 
 DocumentRoot C:/Apache2/htdocs</fo=
nt>
 ErrorLog logs/ssl_error_log
 
 SSLCipherSuite ALL:!ADH:!EXPORT56:=
RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
 
 SSLCertificateFile ssl/denproducti=
on.cert
 SSLCertificateKeyFile ssl/denprodu=
ction.key
 
 SSLOptions +StdEnvVars +CompatEnvV=
ars
 
 SetEnvIf User-Agent ".*MSIE.*=
"
\
 =
nokeepalive
ssl-unclean-shutdown \
 =
downgrade-1.0
force-response-1.0
 
 CustomLog logs/ssl_request_log \</=
font>
 =
"%t
%h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
 
 # Rewrite Rules for Zope
 
 <IfModule mod_rewrite.c></fo=
nt>
 RewriteEngine On
 RewriteLog C:/Apache2/logs/=
rewrite.log
 RewriteLogLevel 0
 # Default to route everythi=
ng
to Zope
 # If the path starts with /=
local,
then just server Apache's root
 RewriteRule ^/test/ - [L]</=
font>
 RewriteRule /(.*) <a href=
=3D"http://localhost:8080/VirtualHostBase/https/denproductio n.fqdn:443/Virt=
ualHostRoot/$1%5BP,L%5D" target=3D"_blank" onclick=3D"return top.js.OpenExt=
Link(window,event,this)">
http://localhost:8080/VirtualHostBase/https/denproduction.fq dn:443/VirtualH=
ostRoot/$1
[P,L]</a>
 </IfModule>
 
 </VirtualHost>
 
 The problem has occurred when I ma=
ke
POST requests from the Python client that I am writing, as well as when
I am managing large python scripts through the Zope management interface
over SSL.
 
 Any pointers are appreciated!</fon=
t>
 
Wes Dyk, Production Systems Analyst 
Noble Energy Production, Inc.

------=_Part_6164_28799990.1144766405381--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users [at] modssl.org
Automated List Manager majordomo [at] modssl.org