https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=194483
Bug ID: 194483 Summary: [PATCH] libfetch: Properly deal with multi-line proxy responses to CONNECT requests Product: Base System Version: 11.0-CURRENT Hardware: Any OS: Any Status: Needs Triage Severity: Affects Some People Priority: --- Component: bin Assignee: freebsd-bugs@FreeBSD.org Reporter: f...@fabiankeil.de CC: d...@freebsd.org Created attachment 148498 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=148498&action=edit [PATCH] libfetch: Properly deal with multi-line proxy responses to CONNECT requests Currently http_connect() expects the proxy response for CONNECT requests to consist of a single response line with no common HTTP headers and otherwise leaves parts of the HTTP response unread. OpenSSL does not appreciate that: # Privoxy is being used as proxy fk@r500 ~/papers $fetch https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-yuan.pdf 34380892520:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_clnt.c:787: fetch: https://www.usenix.org/system/files/conference/osdi14/osdi14-paper-yuan.pdf: Authentication error The attached patch fixes this. -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-bugs@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"