594231 - advanced search does not work if bugzilla is behind a https-offload load balancer

Status: RESOLVED DUPLICATE of bug 509303

(Bugzilla :: Query/Bug List, defect)

Description

[sanjeev]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.2.7) Gecko/20100713 Firefox/3.6.7 ( .NET CLR 3.5.30729; .NET4.0E)
Build Identifier: 3.6.2

We just installed 3.6.2.
We have bugzilla behind a load balancer using https-offload. So all requests come to a https on load balancer but bugzilla runs on non ssl http.

I have configured bugzilla like this - 

urlbase = https://bugs.yieldoptimizer.com/bugzilla/
ssl redirect = off
ssl base = https://bugs.yieldoptimizer.com/bugzilla/

In the advanced search page, when I search for something sometimes it tries to redirect to http://bugs.yieldoptimizer.com/bugzilla/ and not to https://bugs.yieldoptimizer.com/bugzilla/ which I was expecting based on configs above.

I modified buglist.cgi to make it work. The changes I did are - 

original line - 

 #       print $cgi->redirect(-url => $cgi->self_url());  

modified line - 
        print $cgi->redirect_to_https(-url => $cgi->self_url());


I don't think this is a solution but for us it works as we always want it to redirect to https.

Thanks.

Sanjeev




Reproducible: Sometimes

Steps to Reproduce:
1. Setup http offload on a load balancer and put bugzilla behind the load balancer and on http only with configs described above.
2. go to advanced search page
3. select some search items 
4. search
Actual Results:  
Get internal server error page.

Expected Results:  
show me search result page.

Comment 1

[Max Kanat-Alexander]

If you always want Bugzilla to redirect to https, then you need to set ssl_redirect to "on".

buglist.cgi will simply use the URL that it thinks is currently in use.

Try updating your CGI.pm module.

Comment 2

[sanjeev]

Thanks for looking at this.

ssl_redirect behind a load balancer with https-offload does not work as the request to bugzilla goes as plain http and bugzilla will keep redirecting to https and will never complete.

In our case, all pages work fine except the advanced search.

It seems like a limitation in bugzilla. I would request to move this to enhancement list.