bug-wget
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-wget] [Bug-Wget] Patch Test-proxied-https-auth.px


From: Tim Ruehsen
Subject: Re: [Bug-wget] [Bug-Wget] Patch Test-proxied-https-auth.px
Date: Thu, 30 Oct 2014 10:45:42 +0100
User-agent: KMail/4.14.2 (Linux/3.16-3-amd64; KDE/4.14.2; x86_64; ; )

On Wednesday 29 October 2014 15:57:04 Mike Frysinger wrote:
> On 28 Oct 2014 11:47, Tim Ruehsen wrote:
> > I pushed it, since it fixes a bug anyways.
>
> it still seems to be racy for me -- passes only rarely.  using wget 1.16
> with just the one fix 3eff3ad69a46364475e1f4abdf9412cfa87e3d6c.

Meanwhile I know a bit more of how HTTPS proxying works ;-)
The test does not work correctly (or another interpretation: Wget is not ready
to handle the proxy behavior of the test).

How the test should work:
- client open plain connection to proxy
- client sends CONNECT request
- server answers 200 OK
- client/server change to SSL on the existing connection (in the real world
the proxy does this when it established the requested connection to the outer
world)
- client sends unauthorized GET request
- server answers 401 Unauthorized (+ WWW-Authenticate: Basic realm="gondor")
- client sends authorized GET request  (+ Authorization: Basic ...)
- server answers 200 OK
- client is done and closes the connection

I attached a amended test to simulate this behavior 
(Test-proxied-https-auth-keepalive). That works fine (so far tested only with 
OpenSSL).

Of course the proxy could send a 'Proxy-Connection: close' with the first 401
answer and close the connection. For this case I create a second test case
later.

Please could you (and of course anyone else) test the attached test and report
the results !? (Just copy the file into tests/ directory, chmod a+x, execute
it.)

(The valgrind testing still fails - that needs investigation as I said in my
previous mail.)

Tim

Attachment: Test-proxied-https-auth-keepalive.px
Description: Perl program

Attachment: signature.asc
Description: This is a digitally signed message part.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]