[OpenIndiana-discuss] SOLVED - pkg/server behind reverse proxy needs AllowEncodedSlashes On

[Bayard Bell]

On Wed, Apr 11, 2012 at 11:43 AM, Gabriele Bulfon <gbulfon at sonicle.com> wrote:
> I finally found the reason for the pkg.depotd not working behind Apache reverse proxy: I had to
> configure a virtual host with "AllowEncodedSlashes On", or manifests and packages URLs
> never worked!
> Strange one...

Not so strange, really, as package FMRIs need to have encoded slashes
in them. It's a reasonable default for a web server to refuse
non-canonical representations that could allow for path traversals.

Cheers,
Bayard