Re: Apache Misdirected Request with AWS ELB

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have had the same problem with the last version of apache on ubuntu.

My configuration was a front reverse proxy nginx on an host and the apache server on another one.

So in the proxy I redirected the trafic to the apache server with https://server.network
But on the apache server I had a virtual host named service.network

So.. when the SSL connexion is established, the SNI is sent in the SSL negoctiation with the nams server.network, but the apache server is waiting for service.netwok as it is the virtual hostname.

Si it sends the error :
> Misdirected Request
> The client needs a new connection for this request as the requested host name does not match the Server Name Indication (SNI) in use for this connection."

Clearly this is a new behavior and it is very problematic when you do virtual hosting.

I could correct the problem by editing the nginx configuration : I add the two following lines : 

proxy_ssl_server_name on;
proxy_ssl_name $host;

which means that during SSL negotiation it the $host name (so service.network) that is sent. And apache is happy.

I don’t know how to correct the problem on your situation.

I have read that this behavior has been corrected in the 2.4.62 version (but I have not tested it).

f.g.




> Le 22 juil. 2025 à 13:12, Andrija Vranić <andrija.vranic@xxxxxxxxx> a écrit :
> 
> unsubscribe
> 
> On Tue, 22 Jul 2025 at 12:31, Brian Proffitt <bkp@xxxxxxxxxx> wrote:
> Forwarded from apache@xxxxxxxxxx. if you choose to respond, please respond to the original sender.
> 
> 
> 
> Brian Proffitt
> VP, Marketing & Publicity
> VP, Conferences
> 
> ---------- Forwarded message ---------
> From: Srinivas T <srinivast@xxxxxxxxxx>
> Date: Tue, Jul 22, 2025, 1:24 AM
> Subject: Apache Misdirected Request with AWS ELB
> To: <apache@xxxxxxxxxx>, <users@xxxxxxxxxxxxxxxx>
> Cc: Vishal Vaddepalli <vishalvaddepalli@xxxxxxxxxx>, Sarath padigala <sarathpadigala@xxxxxxxxxx>
> 
> 
> Hi Apache Team,
> 
> We configured multiple domains with AWS ELB, and following an Apache regular update, we are facing an issue with Apache. 
> 
> The error we are encountering is:
> 
> "Misdirected Request
> The client needs a new connection for this request as the requested host name does not match the Server Name Indication (SNI) in use for this connection."
> 
> Apache/2.4.58 (Ubuntu) Server at trust.nhdc.org.in Port 443
> 
> Could you please provide any guidelines or support to help resolve this issue?
> 
> Thank you for your assistance.
> 
> My number is 7780557864.
> 
> Thanks and Regards,
> T Srinivas
> DevOps Engineer   I   7780557864
> Vasista Enterprise Solutions Pvt Ltd
> Vasista Socials
> Hyderabad

— 
Frédéric Goudal
Ingénieur Système, DSI Bordeaux-INP
+33 556 84 23 11





---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx





[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux