CKB:The internal IP address is revealed in HTTP1.0

Aus Cryptshare Documentation
Version vom 26. Juni 2025, 08:12 Uhr von Lueersb (Diskussion | Beiträge) (Der Seiteninhalt wurde durch einen anderen Text ersetzt: „== Applies to == {{NoteBox|title=|content=All versions of Cryptshare Server }} ----- == Symptom == When requesting a page from a Cryptshare Server, the internal IP address of the server is revealed: '''nc my.cryptshare.server 80''' GET / HTTP/1.0 HTTP/1.1 302 Found Date: Fri, 12 Jun 2015 07:43:06 GMT X-Frame-Options: SAMEORIGIN Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Cache-Control: no-cache, no-stor…“)
(Unterschied) ← Nächstältere Version | Aktuelle Version (Unterschied) | Nächstjüngere Version → (Unterschied)
Wechseln zu:Navigation, Suche

Applies to

All versions of Cryptshare Server

Symptom

When requesting a page from a Cryptshare Server, the internal IP address of the server is revealed:

nc my.cryptshare.server 80

GET / HTTP/1.0

HTTP/1.1 302 Found
Date: Fri, 12 Jun 2015 07:43:06 GMT
X-Frame-Options: SAMEORIGIN
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache, no-store
Location: http://10.0.1.1/Start
Content-Length: 0

Cause

HTTP 1.0 does not support the host-header and the Jetty Server therefore uses the server IP address instead.


Solution

Please set the parameter virtualHosts.restrict in the system.properties file to true. See Advanced Configuration: Virtual Host Restriction