1811182 - HTTP proxy over HTTPS broken after Firefox 103

Status: RESOLVED WORKSFORME

(Core :: Networking: HTTP, defect)

Description

[Dmitry A. Bakshaev]

User Agent: Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/109.0

Steps to reproduce:

1 setup HTTPS-proxy & configure FF to use it (https://bugzilla.mozilla.org/show_bug.cgi?id=1321466#c15)
2 browse any URL from FF

Firefox-103 broken
Firefox-102.7.0 ESR works fine

Actual results:

The connection has timed out
An error occurred during a connection to URL

Expected results:

response from URL

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The Bugbug bot thinks this bug should belong to the 'Core::Networking: HTTP' component, and is moving the bug to that component. Please correct in case you think the bot is wrong.

Comment 2

[Kershaw Chang [:kershaw]]

Hi Reporter,

Could you try to record a http log for this?
Note that the log may contain some privacy information, so please send it to [e-mail].

Thanks.

Comment 3

[Kershaw Chang [:kershaw]]

Also, are you able to reproduce this with the latest Firefox?

Comment 4

[Dmitry A. Bakshaev]

(In reply to Kershaw Chang [:kershaw] from comment #3)

Also, are you able to reproduce this with the latest Firefox?

yes. tested on Firefox 103-109.

Comment 5

[Kershaw Chang [:kershaw]]

(In reply to Dmitry A. Bakshaev from comment #4)

(In reply to Kershaw Chang [:kershaw] from comment #3)

Also, are you able to reproduce this with the latest Firefox?

yes. tested on Firefox 103-109.

If possible, may I ask you to use mozregression to help us figure out the regression range?
Thanks.

Comment 6

[Dmitry A. Bakshaev]

After many tests with different versions of browsers,apache, squid, there was a configuration in which this was repeated.
All tests were with clean browsers profiles with imported certificates and propertry proxy settings.

layout:
firefox -> proxy (squid/https+cert-auth) -> web-server (apache)
squid is completely transparent and its version does not affect anything.

all works fine with:
firefox<=104 + any versions of apache(https+cert-auth)
firefox>=105 + apache>=2.4(https+cert-auth)
firefox>=105 + apache-2.2.32 (https without cert-auth!)

test failed only with:
firefox>=105.0 and apache-2.2.32 (https+cert-auth)

I think just need to update apache :)

Close the bug?

Comment 7

[Kershaw Chang [:kershaw]]

Thanks for doing all these tests!
I'll close this bug.