cURL / Mailing Lists / curl-library / Single Mail

curl-library

Re: cookies handling differences between 7.11.2 and 7.12.0

From: Ralph Mitchell <rmitchell_at_eds.com>
Date: Tue, 08 Jun 2004 02:53:48 -0500

Dunno about cookies as such, but I did notice something odd a couple of
days ago.

1) curl-7.11.1 -u proxy.domain.com -U userid:passwd http://server.domain.com
2) get redirected to a second server for login
3) get refused by the proxy because the proxy userid/passwd isn't passed
on following the redirect to the second server.

With 7.12.0 it seems to work OK.

The details are in the attached files. I do rerun wit hadditional
options if necessary.

Ralph Mitchell

Daniel Stenberg wrote:

>On Mon, 7 Jun 2004 Massimiliano_Ziccardi_at_intesa.it wrote:
>
>
>
>>Hi Daniel, this problem is the same I get when I pass through a proxy (only
>>with 7.12).
>>
>>
>
>Then the same questions apply to you. I cannot fix a problem I don't
>understand and cannot repeat myself.
>
>
>

* About to connect() to proxy.domain.com port 80
* Connected to proxy.domain.com (xxx.xxx.xxx.xxx) port 80
* Establish HTTP proxy tunnel to my.cert.domain.com:443
* Proxy auth using Basic with user 'proxyuser'
< HTTP/1.0 200 Connection established
< Proxy-Agent: NetCache NetApp/5.3.1R1
<
* Proxy replied OK to CONNECT request
* successfully set certificate verify locations:
* CAfile: /usr/local/curl-7.11.1/share/curl/curl-ca-bundle.crt
CApath: none
* SSL connection using AES256-SHA
* Server certificate:
* subject: blah, blah, blah... CN=my.cert.domain.com
* start date: 2004-02-09 00:00:00 GMT
* expire date: 2005-02-08 23:59:59 GMT
* common name: my.cert.domain.com (matched)
* issuer: /O=VeriSign Trust Network/OU=VeriSign, Inc./OU=VeriSign International Server CA - Class 3/OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign
* SSL certificate verify ok.
> GET /path HTTP/1.1
User-Agent: curl/7.11.1 (i686-pc-linux-gnu) libcurl/7.11.1 OpenSSL/0.9.7d zlib/1.1.3
Host: my.cert.domain.com
Pragma: no-cache
Accept: */*

HTTP/1.1 302 Moved Temporarily
Server: Netscape-Enterprise/6.0
Date: Tue, 08 Jun 2004 07:28:59 GMT
Cache-Control: no-cache
Location: /login.jsp
Connection: close

HTTP/1.0 407 Proxy Authentication Required
Date: Tue, 08 Jun 2004 07:29:00 GMT
Content-Length: 257
Content-Type: text/html
Server: NetCache appliance (NetApp/5.3.1R1)
Proxy-Authenticate: Basic realm="proxy server proxy.domain.com"

* About to connect() to proxy.domain.com port 80
* Connected to proxy.domain.com (xxx.xxx.xxx.xxx) port 80
* Establish HTTP proxy tunnel to my.cert.domain.com:443
* Proxy auth using Basic with user 'proxyuser'
< HTTP/1.0 200 Connection established
< Proxy-Agent: NetCache NetApp/5.3.1R1
<
* Proxy replied OK to CONNECT request
* successfully set certificate verify locations:
* CAfile: /usr/local/curl-7.12.0/share/curl/curl-ca-bundle.crt
CApath: none
* SSL connection using AES256-SHA
* Server certificate:
* subject: blah, blah, blah... CN=my.cert.domain.com
* start date: 2004-02-09 00:00:00 GMT
* expire date: 2005-02-08 23:59:59 GMT
* common name: my.cert.domain.com (matched)
* issuer: /O=VeriSign Trust Network/OU=VeriSign, Inc./OU=VeriSign International Server CA - Class 3/OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign
* SSL certificate verify ok.
> GET /path HTTP/1.1
User-Agent: curl/7.12.0 (i686-pc-linux-gnu) libcurl/7.12.0 OpenSSL/0.9.7d zlib/1.1.3
Host: my.cert.domain.com
Pragma: no-cache
Accept: */*

< HTTP/1.1 302 Moved Temporarily
< Server: Netscape-Enterprise/6.0
< Date: Tue, 08 Jun 2004 07:28:59 GMT
< Cache-Control: no-cache
< Location: /login.jsp
< Connection: close
* Closing connection #0
* Issue another request to this URL: 'https://my.cert.domain.com/login.jsp'
* About to connect() to proxy.domain.com port 80
* Connected to proxy.domain.com (144.9.158.98) port 80
* Establish HTTP proxy tunnel to my.cert.domain.com:443
* Proxy auth using Basic with user 'proxyuser'
< HTTP/1.0 200 Connection established
< Proxy-Agent: NetCache NetApp/5.3.1R1
<
* Proxy replied OK to CONNECT request
* successfully set certificate verify locations:
* CAfile: /usr/local/curl-7.12.0/share/curl/curl-ca-bundle.crt
CApath: none
* SSL re-using session ID
* SSL connection using AES256-SHA
* Server certificate:
* subject: blah, blah, blah CN=my.cert.domain.com
* start date: 2004-02-09 00:00:00 GMT
* expire date: 2005-02-08 23:59:59 GMT
* common name: my.cert.domain.com (matched)
* issuer: /O=VeriSign Trust Network/OU=VeriSign, Inc./OU=VeriSign International Server CA - Class 3/OU=www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign
* SSL certificate verify ok.
> GET /login.jsp HTTP/1.1
User-Agent: curl/7.12.0 (i686-pc-linux-gnu) libcurl/7.12.0 OpenSSL/0.9.7d zlib/1.1.3
Host: my.cert.domain.com
Pragma: no-cache
Accept: */*

< HTTP/1.1 200 OK
< Server: Netscape-Enterprise/6.0
< Date: Tue, 08 Jun 2004 07:28:59 GMT
< Content-type: text/html;charset=ISO-8859-1
* Added cookie JSESSIONID="pronto.cert.domain.com.444-422864597dc226" for domain my.cert.domain.com, path /, expire 0
< Set-cookie: JSESSIONID=pronto.cert.domain.com.444-422864597dc226;path=/
< Transfer-Encoding: chunked
HTTP/1.0 200 Connection established
Proxy-Agent: NetCache NetApp/5.3.1R1

HTTP/1.1 302 Moved Temporarily
Server: Netscape-Enterprise/6.0
Date: Tue, 08 Jun 2004 07:28:59 GMT
Cache-Control: no-cache
Location: /login.jsp
Connection: close

HTTP/1.0 200 Connection established
Proxy-Agent: NetCache NetApp/5.3.1R1

HTTP/1.1 200 OK
Server: Netscape-Enterprise/6.0
Date: Tue, 08 Jun 2004 07:28:59 GMT
Content-type: text/html;charset=ISO-8859-1
Set-cookie: JSESSIONID=pronto.cert.domain.com.444-422864597dc226;path=/
Transfer-Encoding: chunked

<html>
<head>
blah, blah, blah
</head>
<BODY>
blah, blah, blah
</BODY>
</html>
Received on 2004-06-08

This message: [ Message body ]
Next message: Daniel Stenberg: "Re: hang with NTLM auth on both proxy and host during upload"
Previous message: Serge van den Broek: "anonymous SSL"
In reply to: Daniel Stenberg: "Re: cookies handling differences between 7.11.2 and 7.12.0"
Next in thread: Daniel Stenberg: "Re: cookies handling differences between 7.11.2 and 7.12.0"
Reply: Daniel Stenberg: "Re: cookies handling differences between 7.11.2 and 7.12.0"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]