Wrong use of opennms.web.base-url

Description

The opennms.web.base-url allows to run OpenNMS behind a proxy, by just rewriting the host part of the URL with the value from the X-Forwarded-Host header. However, this header may contain a comma separated list of hostnames, if multiple proxy severs are used.

As an example, consider this setup:

OpenNMS (127.0.0.1:8089) <-- Local Proxy (opennms.company.local:443) <-- Proxy (opennms.domain.tld:443)

When using "opennms.web.base-url = https://%x%c/", this will result in URLs being rewritten to:
https://opennms.domain.tld%2C%20opennms.local

Acceptance / Success Criteria

None

Lucidchart Diagrams

Activity

Show:

Jesse White December 9, 2015 at 4:42 PM

Fixed in foundation-2016 with 886395e8bdeca498071ed7412d6ae35d1f90fc7e.

fooker December 2, 2015 at 10:56 AM

Fixed

Details

Assignee

Reporter

Affects versions

Priority

PagerDuty

Created December 2, 2015 at 10:51 AM
Updated January 4, 2016 at 3:18 PM
Resolved December 9, 2015 at 4:42 PM

Flag notifications