[Bug 325693] New: libzypp not compliant to HTTP/1.1 specification

newer
[Bug 227511] New: opensuseupdater...

bugzilla_noreply＠novell.com

17 Sep 2007 17 Sep '07

15:19

https://bugzilla.novell.com/show_bug.cgi?id=325693 Summary: libzypp not compliant to HTTP/1.1 specification Product: openSUSE 10.3 Version: Beta 3 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp AssignedTo: kkaempf@novell.com ReportedBy: poeml@novell.com QAContact: kkaempf@novell.com Found By: --- libzypp does issue HTTP requests which don't comply to the HTTP/1.1 specification: 213.84.49.35 - - [17/Sep/2007:16:54:23 +0200] "GET http://widehat.opensuse.org/distribution/SL-OSS-factory/inst-source/suse/i58... HTTP/1.1" 200 6427137 "-" "Novell ZYPP Installer" 213.17.12.182 - - [17/Sep/2007:16:54:33 +0200] "GET http://widehat.opensuse.org/distribution/SL-OSS-factory/inst-source/suse/i58... HTTP/1.1" 200 100948 "-" "Novell ZYPP Installer" 195.135.221.2 - - [17/Sep/2007:16:54:33 +0200] "GET /distribution/SL-OSS-factory/inst-source/suse/noarch/yast2-ldap-client-2.15.12-27.noarch.rpm HTTP/1.1" 200 101095 "-" "Novell ZYPP Installer" 80.130.246.208 - - [17/Sep/2007:16:54:29 +0200] "GET /distribution/SL-OSS-factory/inst-source/suse/x86_64/libkde4-3.93.0.svn712047-2.x86_64.rpm HTTP/1.1" 200 6333373 "-" "Novell ZYPP Installer" The first two of these are wrong. Acc. to rfc 2616, 5.1.2 the client MUST use the so-called abs_path URL form: "The most common form of Request-URI is that used to identify a resource on an origin server or gateway. In this case the absolute path of the URI MUST be transmitted (see section 3.2.1, abs_path) as the Request-URI, and the network location of the URI (authority) MUST be transmitted in a Host header field." The abs_path form is defined in rfc 2396, 3. The effect of this is mitigated by the fact that "To allow for transition to absoluteURIs in all requests in future versions of HTTP, all HTTP/1.1 servers MUST accept the absoluteURI form in requests, even though HTTP/1.1 clients will only generate them in requests to proxies." but it is clearly a violation of the protocol. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

17 Sep 17 Sep

15:48

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693#c1 Klaus Kämpf changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mt@novell.com AssignedTo|kkaempf@novell.com |dmacvicar@novell.com --- Comment #1 from Klaus Kämpf 2007-09-17 09:48:38 MST --- Is it curl or zypp ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16:41

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693#c3 Peter Poeml changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |poeml@novell.com --- Comment #3 from Peter Poeml 2007-09-17 10:41:53 MST --- If this was critical, I would have set the bug to critical, not normal. :-) I can confirm that our Apache + redirector handles the requests fine, it acts according to rfc 2616 as quoted above. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

18 Sep 18 Sep

09:36

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693#c5 Ján Kupec changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|dmacvicar@novell.com |mmarek@novell.com --- Comment #5 from Ján Kupec 2007-09-18 03:36:23 MST --- Reassigning to the curl maintainer. Michal, see comment #4 and the initial comment. Just wondering, why are some requests OK and others not. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

19 Sep 19 Sep

16:32

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693#c6 Michal Marek changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |poeml@novell.com --- Comment #6 from Michal Marek 2007-09-19 10:32:16 MST --- I'll try to find a path in the curl code that could make it send an absoluteURI to a non-proxy. But it's going be quite hard w/o being able to reproduce & not knowing any details. It could even be a bug somewhere else, eg. in a proxy inbetween. Just in case, Peter, is there perhaps some pattern in the absoluteURI requests (eg. given IP address / IP range either sends all requests as absoluteURI or all as abs_path), or is it more or less random? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

29 Nov 29 Nov

15:32

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693#c7 --- Comment #7 from Stephan Kulow 2007-11-29 08:32:26 MST --- Peter? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15:44

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693#c8 Peter Poeml changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|poeml@novell.com | --- Comment #8 from Peter Poeml 2007-11-29 08:44:52 MST --- Other than User-Agent "Novell ZYPP Installer", I'm not aware of a pattern. IPs seem random, but they all seem to request 10.3 or Factory stuff. And each IP seems to be using either the one or the other scheme, but not randomly switching between them. (I didn't do an extensive research on the latter, because it would take a very long time.) BTW, how about adding a version number to the user agent string? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

25 Feb 25 Feb

11:41

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 User mmarek@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c9 Michal Marek changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |poeml@novell.com --- Comment #9 from Michal Marek 2008-02-25 04:41:59 MST --- Peter, do you still see these requests for Factory URLs (now with curl 7.18.0 in Factory). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

20 May 20 May

06:51

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c10 Peter Poeml changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|poeml@novell.com | --- Comment #10 from Peter Poeml 2008-05-20 00:51:49 MST --- Yes, I just saw it again: aa.bb.cc.dd - - [20/May/2008:08:46:29 +0200] "GET http://download.opensuse.org/distribution/SL-Factory-non-oss/inst-source-ext... HTTP/1.1" 404 1045 "-" "ZYpp 4.21.2 (curl 7.18.1)" - 291 1419 -:- size:- - The user agent indicates that the client is actually running factory. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

08:37

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 User mmarek@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c11 Michal Marek changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #11 from Michal Marek 2008-05-20 02:37:05 MST --- $ http_proxy=http://example.org:80 curl -v http://example.org/index.html makes curl think that example.org is a proxy: * About to connect() to proxy example.org port 80 (#0) * Trying 208.77.188.166... connected * Connected to example.org (208.77.188.166) port 80 (#0)

...

GET http://example.org/index.html HTTP/1.1 User-Agent: curl/7.18.1 (x86_64-unknown-linux-gnu) libcurl/7.18.1 OpenSSL/0.9.8g zlib/1.2.3 libidn/1.8 libssh2/0.18 ..

But I wonder who would set http://download.opensuse.org:80 as a proxy... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

08:44

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c12 --- Comment #12 from Peter Poeml 2008-05-20 02:44:01 MST --- Maybe a configuration error in/through yast? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

1 Jul 1 Jul

13:11

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 User mmarek@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c13 Michal Marek changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |jkupec@novell.com --- Comment #13 from Michal Marek 2008-07-01 07:11:34 MDT --- Jano: one possible reason for these requests would be that libcurl is told to use widehat.opensuse.org (the target server) as proxy, see comment #11. Is it possible that yast or libzypp wrongly sets the proxy to such value? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15 Jul 15 Jul

14:25

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 Duncan Mac-Vicar changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dmacvicar@novell.com Priority|P5 - None |P3 - Medium -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

23 Jul 23 Jul

11:04

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 Michal Marek changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Normal |Minor Priority|P3 - Medium |P4 - Low -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:51

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c14 --- Comment #14 from Peter Poeml 2008-07-23 07:51:26 MDT --- Any progress on this one? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

14:34

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 User jkupec@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c15 --- Comment #15 from Ján Kupec 2008-07-23 08:34:08 MDT --- i'll look at c#13 it soon, hold on -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

24 Oct 24 Oct

11:27

New subject: [Bug 325693] libzypp not compliant to HTTP/1.1 specification

https://bugzilla.novell.com/show_bug.cgi?id=325693 Andreas Jaeger changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|mmarek@novell.com |jkupec@novell.com Status|NEEDINFO |NEW Info Provider|jkupec@novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

5673

Age (days ago)

6076

Last active (days ago)

List overview

Download

16 comments

1 participants

participants (1)

bugzilla_noreply＠novell.com

[Bug 325693] New: libzypp not compliant to HTTP/1.1 specification

tags

participants (1)