Lighttpd

• LighTTPD, with mod_extforward configured, is sitting behind a reverse proxy
• User agent requests https://some.server/some/dir
• The reverse proxy terminates SSL and inserts an X-Forwarded-For: https header into the plaintext request to LighTTPD

LighTTPD should respond with a redirect to https://some.server/some/dir/, but instead redirects to http://some.server/some/dir/. As in Issue #1499, when the X-Forwarded-For: https header is present, LighTTPD should pretend to serve an HTTPS request in every way except doing the actual encryption.

Here's the offending excerpt from http_response_redirect_to_directory(...) (in src/http-header-glue.c):

    if (con->conf.is_ssl) {
        buffer_copy_string(o, "https://");
    } else {
        buffer_copy_string(o, "http://");
    }

It should be more like this excerpt from src/mod_fastcgi.c:

    if (srv_sock->is_ssl || srv_sock->is_proxy_ssl) {
        FCGI_ENV_ADD_CHECK(fcgi_env_add(p->fcgi_env, CONST_STR_LEN("HTTPS"), CONST_STR_LEN("on")),con)
    }