[Bug 1298273] Re: apache2 doesn't compare SNI hostname against Host header case-insensitively

Wed May 7 14:42:21 UTC 2014

This was verified by @janghoon:

I verified this bug on my test environment and the new package
2.2.22-1ubuntu1.6 fixed this bug.

Apache2-2.2.22-1ubuntu1.5
janghoon at ldsserver:/var/log/apache2$ dpkg -l | grep apache2
ii apache2 2.2.22-1ubuntu1.5 Apache HTTP Server metapackage

janghoon at lds-client:~$ sudo curl https://ldsserver.canonical.COM/message-system --cacert /etc/landscape/landscape_server_ca.crt
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
<hr>
<address>Apache/2.2.22 (Ubuntu) Server at ldsserver.canonical.com Port 443</address>
</body></html>

on apache error log,
[Wed May 07 18:47:57 2014] [error] Hostname ldsserver.canonical.COM provided via SNI and hostname ldsserver.canonical.com provided via HTTP are different

==============================
Apache2-2.2.22-1ubuntu1.6
janghoon at ldsserver:/var/log/apache2$ dpkg -l | grep apache2
ii apache2 2.2.22-1ubuntu1.6 Apache HTTP Server metapackage

janghoon at lds-client:~$ sudo curl https://ldsserver.canonical.COM/message-system --cacert /etc/landscape/landscape_server_ca.crt
No error returned.

I verified Apache2-2.2.22-1ubuntu1.6 uses case-insensitive comparison.

** Tags removed: verification-needed
** Tags added: verification-done

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to apache2 in Ubuntu.
https://bugs.launchpad.net/bugs/1298273

Title:
   apache2 doesn't compare SNI hostname against Host header case-
  insensitively

To manage notifications about this bug go to:
https://bugs.launchpad.net/apache2/+bug/1298273/+subscriptions