Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Oct 2014 11:55:28 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-bugs@FreeBSD.org
Subject:   [Bug 194483] New: [PATCH] libfetch: Properly deal with multi-line proxy responses to CONNECT requests
Message-ID:  <bug-194483-8@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194483

            Bug ID: 194483
           Summary: [PATCH] libfetch: Properly deal with multi-line proxy
                    responses to CONNECT requests
           Product: Base System
           Version: 11.0-CURRENT
          Hardware: Any
                OS: Any
            Status: Needs Triage
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: freebsd-bugs@FreeBSD.org
          Reporter: fk@fabiankeil.de
                CC: des@FreeBSD.org

Created attachment 148498
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=148498&action=edit
[PATCH] libfetch: Properly deal with multi-line proxy responses to CONNECT
requests

Currently http_connect() expects the proxy response for CONNECT requests
to consist of a single response line with no common HTTP headers and
otherwise leaves parts of the HTTP response unread.

OpenSSL does not appreciate that:

# Privoxy is being used as proxy
fk@r500 ~/papers $fetch
https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-yuan.pdf
34380892520:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
protocol:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:787:
fetch:
https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-yuan.pdf:
Authentication error

The attached patch fixes this.

-- 
You are receiving this mail because:
You are the assignee for the bug.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-194483-8>