Skip to content

traefik no longer url escape X-Forwarded-Tls-Client-Cert header #9143

@Aetf

Description

@Aetf

stdiscosrv has the ability to handle certificates passed by traefik proxy server in X-Forwarded-Tls-Client-Cert header.

Previously, traefik url encodes the content but it stopped doing so since version v2.9.4.
This becomes troublesome for setups where stdiscosrv sits behind newer traefik versions,
as now stdiscosrv tries to url decode the header content when it is not encoded.

The symptom can be very confusing, as if some client's certificate's pem text happens to not contain +, etc, then it works perfectly, but other clients will always fail announcement with 403 error.

More details can be found at traefik/traefik#9669.

I'm not sure what should be the best strategy here to support both old and new traefik versions... but wanted to at least raise attention.

stdiscosrv version: 1.24.0

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugA problem with current functionality, as opposed to missing functionality (enhancement)frozen-due-to-ageIssues closed and untouched for a long time, together with being locked for discussion

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions