Bug 49834 – UDM UCR policy apache2/force_https=yes causes redirect loop in etherpad-lite app

Bug 49834 - UDM UCR policy apache2/force_https=yes causes redirect loop in etherpad-lite app


Summary:	UDM UCR policy apache2/force_https=yes causes redirect loop in etherpad-lite app

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	Etherpad
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	App Center maintainers
QA Contact:	App Center maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2019-07-10 22:00 CEST by Arvid Requate
Modified:	2019-08-13 20:42 CEST (History)
CC List:	4 users (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	3: Simply Wrong: The implementation doesn't match the docu
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	5: Blocking further progress on the daily work
User Pain:	0.086
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Arvid Requate

2019-07-10 22:00:22 CEST

If a UCR policy has been defined in UDM to set apache2/force_https=yes, then appbox based docker apps like the etherpad-lite (docker) app are not reachable any longer because

=======================================================================
wget 'https://etherpad-lite.knut.univention.de/etherpad/'
--2019-07-10 19:49:09--  https://etherpad-lite.knut.univention.de/etherpad/
Resolving etherpad-lite.knut.univention.de (etherpad-lite.knut.univention.de)... 192.168.123.456

Connecting to etherpad-lite.knut.univention.de (etherpad-lite.knut.univention.de)|192.168.0.67|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://etherpad-lite.knut.univention.de/etherpad/ [following]
--2019-07-10 19:49:09--  https://etherpad-lite.knut.univention.de/etherpad/
Reusing existing connection to etherpad-lite.knut.univention.de:443.
[...]
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://etherpad-lite.knut.univention.de/etherpad/ [following]
20 redirections exceeded.
=======================================================================

It has been necessary to

univention-app shell etherpad-lite ucr set --force apache2/force_https=no

Comment 1 Arvid Requate

2019-07-10 22:03:26 CEST

plus

systemctl restart apache2.service

Comment 2 Nico Gulden

2019-08-13 20:42:34 CEST

Has this bug also occurred with other AppBox based apps like for example Dudle?