httpd icon indicating copy to clipboard operation
httpd copied to clipboard

mod_ssl: directly abort connection when receiving HTTP requests

Open daum3ns opened this issue 10 months ago • 2 comments

Shutdown the ssl filter and abort the connection instead of disabling is and pass a fake request to the core handler. The current implementation allows to exhaust workers by sendin HTTP request to HTTPS port. Additionally the Openssl lib doesn't detect the http methods PATCH, DELETE, OPTIONS and TRACE. So the current implementation only works partially. See openssl PR: https://github.com/openssl/openssl/pull/26968

daum3ns avatar Mar 18 '25 10:03 daum3ns