curl / Mailing Lists / curl-users / Single Mail
Buy commercial curl support from WolfSSL. We help you work out your issues, debug your libcurl applications, use the API, port to new platforms, add new features and more. With a team lead by the curl founder himself.

Re: curl command ignoring Actions= text?

From: Ray Satiro via curl-users <curl-users_at_lists.haxx.se>
Date: Tue, 19 Oct 2021 17:34:17 -0400

On 10/19/2021 2:43 PM, Werner L. Stolz via curl-users wrote:
> We have a website from which we pull files every day.  Over the
> weekend this site updated their certificates.  We tested on Sunday and
> there
> were no issues.
>  
> Today, when we try to pull files, we get the following error message:
> 'Action' should be <getList> or <getFile> or <getSignature> or
> <updateList>
>  
> But, when I look at the curl command we are issuing, it looks like this:
>  
> I have replaced IP addresses and passwords with generic text for security.
>  
> curl -b cookies.wls.txt -c cookies.wls.txt --cert file.pem:password -k
> -x ip.of.socks.proxy:port -d 'Action=getList&Sender=Vendx'
> _https://ip.of.remote.site/invoke/PartnerPull%3ApullService_
> <https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fip.of.remote.site%2Finvoke%2FPartnerPull%253ApullService&data=04%7C01%7Cwstolz%40investcloud.com%7C5e65059f9a5c40b94a9c08d9932f208c%7C134fa738eba84721a959151561c6c68e%7C0%7C0%7C637702652887812648%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=T3ztBrt7RED2fRG1MzLn8qWt%2B7uQnsD0hor5SBWvfgg%3D&reserved=0>
> -o list.wls.txt
>  
> The “Action=getList” is clearly present in the command line, so does
> anyone have any ideas why we would get this message?
>  
> We are running this from a shell script under UNIX. We made no changes
> to our process over the weekend, in fact the script is still dated 2017.


It looks like more was changed than just the server certificates. That
error message is from the server, not curl. You will have to review
their API to determine if you are sending the correct data. Also, don't
use -k it disables SSL verification [1].


[1]: https://curl.se/docs/manpage.html#-k



-- 
Unsubscribe: https://lists.haxx.se/listinfo/curl-users
Etiquette:   https://curl.haxx.se/mail/etiquette.html
Received on 2021-10-19