Apache Proxy HTTP CONNECT method enabled
- by John
I'm using Apache as reverse proxy for several different projects. PCI-DSS compliance scanning shows that my Apache is having HTTP CONNECT method enabled.
as stated on Acunetix's site - http://www.acunetix.com/vulnerabilities/apache-proxy-http-connect-metho/
As far as I know, CONNECT is used by the web server to tunnel SSL to application server.
Any suggestion how should I fix this?
Otherwise, anyone know how should I perform the test if my Apache's HTTP CONNECT method is enabled/disabled?