[JIRA] (SSPCPP-973) ETag not being stored off when HTTP/2 used for metadata

[peter (Jira)]

peter ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=60ad33f05dc18500704c2ef8 ) *commented* on SSPCPP-973 ( https://shibboleth.atlassian.net/browse/SSPCPP-973?atlOrigin=eyJpIjoiYWZiNTE0YWI0Y2E2NDMzYjg5N2Q4YWQxZTBjZmJhNWIiLCJwIjoiaiJ9 )

Re: ETag not being stored off when HTTP/2 used for metadata ( https://shibboleth.atlassian.net/browse/SSPCPP-973?atlOrigin=eyJpIjoiYWZiNTE0YWI0Y2E2NDMzYjg5N2Q4YWQxZTBjZmJhNWIiLCJwIjoiaiJ9 )

Again, please forget I ever mentioned Debian – all the tests and commands and outputs I posted previously and below are from running shibd and curl on a fresh Rocky 9 system, everything plain vanilla and out of the box (OS + official Shib RPMs via YUM repo):

$ head -n2 /etc/os-release
NAME="Rocky Linux"
VERSION="9.1 (Blue Onyx)"

Some version details (note the nghttp2 at the end of the first line and again HTTP2 on the last line):

$ curl --version
curl 7.76.1 (x86_64-redhat-linux-gnu) libcurl/7.76.1 OpenSSL/3.0.1 zlib/1.2.11 brotli/1.0.9 libidn2/2.3.0 libpsl/0.21.1 (+libidn2/2.3.0) libssh/0.9.6/openssl/zlib nghttp2/1.43.0
Release-Date: 2021-04-14
Protocols: dict file ftp ftps gopher gophers http https imap imaps ldap ldaps mqtt pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp 
Features: alt-svc AsynchDNS brotli GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets

So definitively HTTP/2 support in there.

$ ldd /usr/sbin/shibd | fgrep curl
       libcurl.so.4 => /lib64/libcurl.so.4 (0x00007f3e3e80d000)
$ rpm -qf /lib64/libcurl.so.4
libcurl-7.76.1-19.el9_1.1.x86_64

None of that is adding new information here, though, as I’ve already posted the server’s access log here ealier clearly showing shibd’s requests coming in over HTTP/2:

"GET /md/aconet-interfed.xml HTTP/2.0" 200 78768683 "-" "shibboleth/3.4.1 OpenSAML/3.2.1 XMLTooling/3.2.3 XML-Security-C/2.0.4 Xerces-C/3.2.4 log4shib/2.0.1 libcurl/7.76.1 OpenSSL 3.0.1 14 Dec 2021"

and that’s coming from the same, singular Rocky 9 system I’ve set up soleley for this test.

( https://shibboleth.atlassian.net/browse/SSPCPP-973#add-comment?atlOrigin=eyJpIjoiYWZiNTE0YWI0Y2E2NDMzYjg5N2Q4YWQxZTBjZmJhNWIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/SSPCPP-973#add-comment?atlOrigin=eyJpIjoiYWZiNTE0YWI0Y2E2NDMzYjg5N2Q4YWQxZTBjZmJhNWIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100219- sha1:ac3e918 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230325/82016ed5/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-6fa8713a-8405-4d6b-a4d6-4a61126b5d60
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230325/82016ed5/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-ea3a6ee3-0a34-430d-8ee3-ea4bcff96f88
Type: image/png
Size: 345 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230325/82016ed5/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-f20d4257-36ca-43e9-8ec6-3dc6b08dd18a
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230325/82016ed5/attachment-0005.png>