[OpenIndiana-discuss] SOLVED - pkg/server behind reverse proxy needs AllowEncodedSlashes On
buffer.g.overflow at gmail.com
Wed Apr 11 11:08:13 UTC 2012
On Wed, Apr 11, 2012 at 11:43 AM, Gabriele Bulfon <gbulfon at sonicle.com> wrote:
> I finally found the reason for the pkg.depotd not working behind Apache reverse proxy: I had to
> configure a virtual host with "AllowEncodedSlashes On", or manifests and packages URLs
> never worked!
> Strange one...
Not so strange, really, as package FMRIs need to have encoded slashes
in them. It's a reasonable default for a web server to refuse
non-canonical representations that could allow for path traversals.
More information about the OpenIndiana-discuss