https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194483
Bug ID: 194483
Summary: [PATCH] libfetch: Properly deal with multi-line proxy
responses to CONNECT requests
Product: Base System
Version: 11.0-CURRENT
Hardware: Any
OS: Any
Status: Needs Triage
Severity: Affects Some People
Priority: ---
Component: bin
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Created attachment 148498
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=148498&action=edit
[PATCH] libfetch: Properly deal with multi-line proxy responses to CONNECT
requests
Currently http_connect() expects the proxy response for CONNECT requests
to consist of a single response line with no common HTTP headers and
otherwise leaves parts of the HTTP response unread.
OpenSSL does not appreciate that:
# Privoxy is being used as proxy
fk@r500 ~/papers $fetch
https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-yuan.pdf
34380892520:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown
protocol:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:787:
fetch:
https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-yuan.pdf:
Authentication error
The attached patch fixes this.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "[email protected]"