Hi Curl team,

When I use curl 7.31.0 I can not authenticate to a proxy with negotiate ( I haven't tried the other methods). It works fine in 7.28.1. Is this a known issue ?

Broken 7.31.0:

> src/curl -V
curl 7.31.0 (x86_64-unknown-linux-gnu) libcurl/7.31.0 OpenSSL/1.0.1e
zlib/1.2.7 libidn/1.25 libssh2/1.4.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3
pop3s rtsp scp sftp smtp smtps telnet tftp
Features: GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz TLS-SRP
> src/curl -x opensuse12.suse.home:3128 -U : --proxy-negotiate -v -o
> /tmp/curl.tbz http://curl.haxx.se/download/curl-7.31.0.tar.bz2
* About to connect() to proxy opensuse12.suse.home port 3128 (#0)
* Trying 192.168.1.29...
* Adding handle: conn: 0x12e2d30
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x12e2d30) send_pipe: 1, recv_pipe: 0
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:--
0* Connected to opensuse12.suse.home (192.168.1.29) port 3128 (#0)
> GET http://curl.haxx.se/download/curl-7.31.0.tar.bz2 HTTP/1.1
> User-Agent: curl/7.31.0
> Host: curl.haxx.se
> Accept: */*
> Proxy-Connection: Keep-Alive
>
0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:--
0< HTTP/1.1 407 Proxy Authentication Required
* Server squid/3.2.3 is not blacklisted
< Server: squid/3.2.3
< Mime-Version: 1.0
< Date: Sat, 29 Jun 2013 17:39:06 GMT
< Content-Type: text/html
< Content-Length: 3299
< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
< Vary: Accept-Language
< Content-Language: en
< Proxy-Authenticate: Negotiate
< Proxy-Authenticate: NTLM
< X-Cache: MISS from opensuse12.suse.home
< X-Cache-Lookup: NONE from opensuse12.suse.home:3128
< Via: 1.1 opensuse12.suse.home (squid/3.2.3)
< Connection: keep-alive
<
{ [data not shown]
100 3299 100 3299 0 0 1638 0 0:00:02 0:00:02 --:--:--
2724
* Connection #0 to host opensuse12.suse.home left intact

Working 7.28.1

> curl -V
curl 7.28.1 (x86_64-suse-linux-gnu) libcurl/7.28.1 OpenSSL/1.0.1e zlib/1.2.7
libidn/1.25 libssh2/1.4.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3
pop3s rtsp scp sftp smtp smtps telnet tftp
Features: AsynchDNS GSS-Negotiate IDN IPv6 Largefile NTLM NTLM_WB SSL libz
TLS-SRP
> curl -x opensuse12.suse.home:3128 -U : --proxy-negotiate -v -o
> /tmp/curl.tbz http://curl.haxx.se/download/curl-7.31.0.tar.bz2
* About to connect() to proxy opensuse12.suse.home port 3128 (#0)
* Trying 192.168.1.29...
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:--
0* connected
* Connected to opensuse12.suse.home (192.168.1.29) port 3128 (#0)
> GET http://curl.haxx.se/download/curl-7.31.0.tar.bz2 HTTP/1.1
> User-Agent: curl/7.28.1
> Host: curl.haxx.se
> Accept: */*
> Proxy-Connection: Keep-Alive
>
< HTTP/1.1 407 Proxy Authentication Required
< Server: squid/3.2.3
< Mime-Version: 1.0
< Date: Sat, 29 Jun 2013 17:45:34 GMT
< Content-Type: text/html
< Content-Length: 3299
< X-Squid-Error: ERR_CACHE_ACCESS_DENIED 0
< Vary: Accept-Language
< Content-Language: en
< Proxy-Authenticate: Negotiate
< Proxy-Authenticate: NTLM
< X-Cache: MISS from opensuse12.suse.home
< X-Cache-Lookup: NONE from opensuse12.suse.home:3128
< Via: 1.1 opensuse12.suse.home (squid/3.2.3)
< Connection: keep-alive
<
* Ignoring the response-body
{ [data not shown]
100 3299 100 3299 0 0 1967 0 0:00:01 0:00:01 --:--:--
1975
* Connection #0 to host opensuse12.suse.home left intact
* Issue another request to this URL:
'http://curl.haxx.se/download/curl-7.31.0.tar.bz2'
* Re-using existing connection! (#0) with host opensuse12.suse.home
* Connected to opensuse12.suse.home (192.168.1.29) port 3128 (#0)
* Proxy auth using GSS-Negotiate with user ''
> GET http://curl.haxx.se/download/curl-7.31.0.tar.bz2 HTTP/1.1
> Proxy-Authorization: Negotiate
> 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
> User-Agent: curl/7.28.1
> Host: curl.haxx.se
> Accept: */*
> Proxy-Connection: Keep-Alive
>
0 0 0 0 0 0 0 0 --:--:-- 0:00:18 --:--:--
0< HTTP/1.1 200 OK
< Date: Sat, 29 Jun 2013 15:25:49 GMT
< Server: Apache
< Last-Modified: Sat, 22 Jun 2013 09:36:12 GMT
< ETag: "1e1c7e-28e1a9-4dfbae9002697"
< Accept-Ranges: bytes
< Content-Length: 2679209
< Content-Type: application/x-bzip2
< Age: 8429
< Proxy-Authentication-Info: Negotiate
YIGDBgkqhkiG9xIBAgICAG90MHKgAwIBBaEDAgEPomYwZKADAgEXol0EW1XDpT5SbGT5z8Wvssj0+9jcQFL8aCAGaEWP5DF093G4XFhIuXJXCuKhtHKBUu1f4YfOHjUlkJVQFnhNzHKc5QCwJhCZT/EjP4zCmD8uk4xdKVoW3qBvaL1XdLE=
< X-Cache: HIT from opensuse12.suse.home
< X-Cache-Lookup: HIT from opensuse12.suse.home:3128
< Via: 1.1 opensuse12.suse.home (squid/3.2.3)
< Connection: keep-alive
<
{ [data not shown]
100 2616k 100 2616k 0 0 133k 0 0:00:19 0:00:19 --:--:--
663k
* Connection #0 to host opensuse12.suse.home left intact
* Closing connection #0

Thank you
Markus

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-users
FAQ: http://curl.haxx.se/docs/faq.html
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2013-06-29