[Bug-wget] [bug #20523] wget ignores timeout on HTTPS connections

[Andrey Mazo]

Follow-up Comment #5, bug #20523 (project wget):

Just in case someone needs a test case for openssl_write() ignoring the
timeout, here it is.
Seems to be reproducible with wget-1.17.1.
It's quite unlikely to happen in the real world but anyway.

1) Make default TCP send buffer less than wget send buffer (which is 8192):

echo "4096 4096 4096" > /proc/sys/net/ipv4/tcp_wmem

2) Generate a sample file larger than TCP send buffer:

dd if=/dev/urandom of=./qqq.junk bs=10M count=1

3) Setup firewall rules to drop large outgoing packets to allow for successful
SSL handshake while blocking bulk uploads:

iptables -I OUTPUT -d <your_https_server> -m length --length 1000:1500 -j
DROP

4) Run wget to send bulk data:

wget --timeout=10 --tries=1 --post-file qqq.junk -O /dev/null
--no-check-certificate 'https://<your_https_server>'

5) Observe wget ignoring the 10 second timeout.

    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?20523>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/