search

payara / Payara

Payara Server is an open source middleware platform that supports reliable and secure deployments of Java EE (Jakarta EE) and MicroProfile applications in any environment: on premise, in the cloud or hybrid.
http://www.payara.fish
Other
884 stars 306 forks source link

Bug Report: PROPFIND fails when TLS is enabled #5670

Closed mkarg closed 1 year ago

mkarg commented 2 years ago

Description

The verb PROPFIND (part of WebDAV) fails when TLS is enabled and Payara was rebooted since deployment of the EAR, but only if the EAR also contains a @WebService.

Expected Outcome

There should not be any restriction on the accepted verbs, either with or without TLS, either with or without @WebService in the same EAR.

Current Outcome

TLS disabled or no @WebService contained in the same EAR: PROPFIND verb is successfully propagated and processed by JAX-RS.

TLS enabled and @WebService contained in the same EAR: Payara blocks with 501 and the following explanation in the response entity:

...
Method PROPFIND is not defined in RFC 2068 and is not supported by the Servlet API 
...

Steps to reproduce

Workaround

Strange but true, PROPFIND works even with TLS unless the reboot is performed.

Environment

mkarg commented 2 years ago

BTW : No, certainly it is not an option to simply switch off TLS. ;-)

mkarg commented 2 years ago

Would be great if anybody could comment on this whether there is a simpler workaround we could apply until a real bugfix is published?

mkarg commented 2 years ago

Possibly related to https://github.com/payara/Payara/issues/5602.

AlanRoth commented 2 years ago

Hi @mkarg,

Can you attach a sample reproducer application for us to investigate?

Thank you, Alan

mkarg commented 2 years ago

As a workaround we have remove the @WebService annotation, so while this is severe it is not urgent anymore. Hence I have planned to provide a reproducer in June.

AlanRoth commented 1 year ago

Hi,

Due to the lack of updates, we will be closing this issue.

Thanks, Alan