Bug #51364
openceph.io reports 500 Internal Server Error
0%
Description
When trying to access https://ceph.io via curl/wget or more particularly as part of HTMLProofer validating external links, an internal server error is reported.
It works via the web browser and then redirects to ceph.io/en.
I think the redirector code somewhere is looking for headers that are just not present when a bot makes the request?
* Trying 8.43.84.140:443... * Connected to ceph.io (8.43.84.140) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): * TLSv1.3 (IN), TLS handshake, Server hello (2): * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): * TLSv1.3 (IN), TLS handshake, Certificate (11): * TLSv1.3 (IN), TLS handshake, CERT verify (15): * TLSv1.3 (IN), TLS handshake, Finished (20): * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): * TLSv1.3 (OUT), TLS handshake, Finished (20): * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN, server accepted to use http/1.1 * Server certificate: * subject: CN=ceph.io * start date: Jun 23 14:48:08 2021 GMT * expire date: Sep 21 14:48:07 2021 GMT * subjectAltName: host "ceph.io" matched cert's "ceph.io" * issuer: C=US; O=Let's Encrypt; CN=R3 * SSL certificate verify ok. > GET / HTTP/1.1 > Host: ceph.io > User-Agent: curl/7.77.0 > Accept: */* > * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): * old SSL session ID is stale, removing * Mark bundle as not supporting multiuse < HTTP/1.1 500 Internal Server Error < Server: nginx < Date: Fri, 25 Jun 2021 09:16:35 GMT < Content-Type: text/html < Content-Length: 170 < Connection: close < <html> <head><title>500 Internal Server Error</title></head> <body> <center><h1>500 Internal Server Error</h1></center> <hr><center>nginx</center> </body> </html> * Closing connection 0
Updated by Fabian Grünbichler 7 months ago
Lars Marowsky-Brée wrote:
When trying to access https://ceph.io via curl/wget or more particularly as part of HTMLProofer validating external links, an internal server error is reported.
It works via the web browser and then redirects to ceph.io/en.
I think the redirector code somewhere is looking for headers that are just not present when a bot makes the request?
[...]
just ran into this as well - it is specifically the "Accept-Language" Header that trips it up (if it is empty or missing, 500, any other content -> redirect to "/en"). it affects both ceph.com and ceph.io.
seems like https://github.com/ceph/ceph.io/blob/main/ansible/roles/deploy/templates/site.j2#L100 is not working as expected?
Updated by Fabian Grünbichler 7 months ago
Updated by Laura Flores 6 months ago
Adding a note to have Mike Perez take a look.