[Catalyst-dev] The RequireSSL problem

Jesse Sheidlower jester at panix.com
Tue Dec 25 17:46:22 GMT 2012


Both Catalyst::Plugin::RequireSSL and Catalyst::ActionRole::RequireSSL
are broken under 5.9x when used with the dev server. Both test for
$c->engine =~ /Catalyst::Engine::HTTP/ (Plugin) or
$c->engine->isa("Catalyst::Engine::HTTP") (ActionRole), which don't work
because the nature of the engines is different in 5.9x.

I've asked about this once or twice before, but, having just set up a
new machine with fresh clean versions of Catalyst which then don't work,
I think it's something we do need to address (even if I am apparently
the only one affected by it (not true--there was a thread on the list in
April about it)).

I think when I originally brought this up, someone said that any change
would break back compat because any solution for 5.9x wouldn't work for
5.8x. However, by this point the 5.9 series has been around for long
enough that we have to regard it as a problem if RequireSSL doesn't work
at all.

Right now my solution is to do nothing on my production machine (on
which I never run the dev server) and to comment things out in
RequireSSL.pm on my laptop (on which I can then _only_ run the dev
server), but what should we do about this in general?

Jesse



More information about the Catalyst-dev mailing list