[Bug 325693] New: libzypp not compliant to HTTP/1.1 specification
https://bugzilla.novell.com/show_bug.cgi?id=325693 Summary: libzypp not compliant to HTTP/1.1 specification Product: openSUSE 10.3 Version: Beta 3 Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp AssignedTo: kkaempf@novell.com ReportedBy: poeml@novell.com QAContact: kkaempf@novell.com Found By: --- libzypp does issue HTTP requests which don't comply to the HTTP/1.1 specification: 213.84.49.35 - - [17/Sep/2007:16:54:23 +0200] "GET http://widehat.opensuse.org/distribution/SL-OSS-factory/inst-source/suse/i58... HTTP/1.1" 200 6427137 "-" "Novell ZYPP Installer" 213.17.12.182 - - [17/Sep/2007:16:54:33 +0200] "GET http://widehat.opensuse.org/distribution/SL-OSS-factory/inst-source/suse/i58... HTTP/1.1" 200 100948 "-" "Novell ZYPP Installer" 195.135.221.2 - - [17/Sep/2007:16:54:33 +0200] "GET /distribution/SL-OSS-factory/inst-source/suse/noarch/yast2-ldap-client-2.15.12-27.noarch.rpm HTTP/1.1" 200 101095 "-" "Novell ZYPP Installer" 80.130.246.208 - - [17/Sep/2007:16:54:29 +0200] "GET /distribution/SL-OSS-factory/inst-source/suse/x86_64/libkde4-3.93.0.svn712047-2.x86_64.rpm HTTP/1.1" 200 6333373 "-" "Novell ZYPP Installer" The first two of these are wrong. Acc. to rfc 2616, 5.1.2 the client MUST use the so-called abs_path URL form: "The most common form of Request-URI is that used to identify a resource on an origin server or gateway. In this case the absolute path of the URI MUST be transmitted (see section 3.2.1, abs_path) as the Request-URI, and the network location of the URI (authority) MUST be transmitted in a Host header field." The abs_path form is defined in rfc 2396, 3. The effect of this is mitigated by the fact that "To allow for transition to absoluteURIs in all requests in future versions of HTTP, all HTTP/1.1 servers MUST accept the absoluteURI form in requests, even though HTTP/1.1 clients will only generate them in requests to proxies." but it is clearly a violation of the protocol. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693#c1 Klaus Kämpf <kkaempf@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mt@novell.com AssignedTo|kkaempf@novell.com |dmacvicar@novell.com --- Comment #1 from Klaus Kämpf <kkaempf@novell.com> 2007-09-17 09:48:38 MST --- Is it curl or zypp ? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693#c3 Peter Poeml <poeml@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |poeml@novell.com --- Comment #3 from Peter Poeml <poeml@novell.com> 2007-09-17 10:41:53 MST --- If this was critical, I would have set the bug to critical, not normal. :-) I can confirm that our Apache + redirector handles the requests fine, it acts according to rfc 2616 as quoted above. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693#c5 Ján Kupec <jkupec@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|dmacvicar@novell.com |mmarek@novell.com --- Comment #5 from Ján Kupec <jkupec@novell.com> 2007-09-18 03:36:23 MST --- Reassigning to the curl maintainer. Michal, see comment #4 and the initial comment. Just wondering, why are some requests OK and others not. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693#c6 Michal Marek <mmarek@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |poeml@novell.com --- Comment #6 from Michal Marek <mmarek@novell.com> 2007-09-19 10:32:16 MST --- I'll try to find a path in the curl code that could make it send an absoluteURI to a non-proxy. But it's going be quite hard w/o being able to reproduce & not knowing any details. It could even be a bug somewhere else, eg. in a proxy inbetween. Just in case, Peter, is there perhaps some pattern in the absoluteURI requests (eg. given IP address / IP range either sends all requests as absoluteURI or all as abs_path), or is it more or less random? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693#c7 --- Comment #7 from Stephan Kulow <coolo@novell.com> 2007-11-29 08:32:26 MST --- Peter? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693#c8 Peter Poeml <poeml@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|poeml@novell.com | --- Comment #8 from Peter Poeml <poeml@novell.com> 2007-11-29 08:44:52 MST --- Other than User-Agent "Novell ZYPP Installer", I'm not aware of a pattern. IPs seem random, but they all seem to request 10.3 or Factory stuff. And each IP seems to be using either the one or the other scheme, but not randomly switching between them. (I didn't do an extensive research on the latter, because it would take a very long time.) BTW, how about adding a version number to the user agent string? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 User mmarek@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c9 Michal Marek <mmarek@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |poeml@novell.com --- Comment #9 from Michal Marek <mmarek@novell.com> 2008-02-25 04:41:59 MST --- Peter, do you still see these requests for Factory URLs (now with curl 7.18.0 in Factory). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c10 Peter Poeml <poeml@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|poeml@novell.com | --- Comment #10 from Peter Poeml <poeml@novell.com> 2008-05-20 00:51:49 MST --- Yes, I just saw it again: aa.bb.cc.dd - - [20/May/2008:08:46:29 +0200] "GET http://download.opensuse.org/distribution/SL-Factory-non-oss/inst-source-ext... HTTP/1.1" 404 1045 "-" "ZYpp 4.21.2 (curl 7.18.1)" - 291 1419 -:- size:- - The user agent indicates that the client is actually running factory. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 User mmarek@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c11 Michal Marek <mmarek@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #11 from Michal Marek <mmarek@novell.com> 2008-05-20 02:37:05 MST --- $ http_proxy=http://example.org:80 curl -v http://example.org/index.html makes curl think that example.org is a proxy: * About to connect() to proxy example.org port 80 (#0) * Trying 208.77.188.166... connected * Connected to example.org (208.77.188.166) port 80 (#0)
GET http://example.org/index.html HTTP/1.1 User-Agent: curl/7.18.1 (x86_64-unknown-linux-gnu) libcurl/7.18.1 OpenSSL/0.9.8g zlib/1.2.3 libidn/1.8 libssh2/0.18 ..
But I wonder who would set http://download.opensuse.org:80 as a proxy... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c12 --- Comment #12 from Peter Poeml <poeml@novell.com> 2008-05-20 02:44:01 MST --- Maybe a configuration error in/through yast? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 User mmarek@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c13 Michal Marek <mmarek@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO Info Provider| |jkupec@novell.com --- Comment #13 from Michal Marek <mmarek@novell.com> 2008-07-01 07:11:34 MDT --- Jano: one possible reason for these requests would be that libcurl is told to use widehat.opensuse.org (the target server) as proxy, see comment #11. Is it possible that yast or libzypp wrongly sets the proxy to such value? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 Duncan Mac-Vicar <dmacvicar@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dmacvicar@novell.com Priority|P5 - None |P3 - Medium -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 Michal Marek <mmarek@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Normal |Minor Priority|P3 - Medium |P4 - Low -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c14 --- Comment #14 from Peter Poeml <poeml@novell.com> 2008-07-23 07:51:26 MDT --- Any progress on this one? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 User jkupec@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=325693#c15 --- Comment #15 from Ján Kupec <jkupec@novell.com> 2008-07-23 08:34:08 MDT --- i'll look at c#13 it soon, hold on -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=325693 Andreas Jaeger <aj@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|mmarek@novell.com |jkupec@novell.com Status|NEEDINFO |NEW Info Provider|jkupec@novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com