[Bug 742084] New: perl script, that uses modules LWP, Crypt::SSLeay works not as expected
https://bugzilla.novell.com/show_bug.cgi?id=742084 https://bugzilla.novell.com/show_bug.cgi?id=742084#c0 Summary: perl script, that uses modules LWP, Crypt::SSLeay works not as expected Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: i386 OS/Version: openSUSE 11.4 Status: NEW Severity: Normal Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: andrzej.sokolowski@yahoo.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Opera/9.80 (Windows NT 6.1; U; IBM EVV/3.0/EAK01AG9/LE; en) Presto/2.10.229 Version/11.60 perl script should connect to web site, that uses certificate to identify it's users script looks like this: ################################ use LWP::UserAgent; $ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0; $ENV{HTTPS_PKCS12_FILE} = 'FILENAME.pfx'; $ENV{HTTPS_PKCS12_PASSWORD} = 'PASSWORD'; my $ua = LWP::UserAgent->new; my $response = $ua->get('https://example.com/logon.asp'); print $response->content, "\n"; ################################# Now regardless of the file supplied script prints the same message coming from web site, that there is no certificate info supplied in the request. Script should print an error message if the file name supplied isn't correct. Script works fine on both Windows with ActivePerl and Debian with it's default Perl installation. With non default perl distribution from ActiveState script acts exactly the same way it does with the default perl installation, so i guess that maybe it's a bug in system's core, mayby SSL implementation or somthing. I guess (see link below) that bug was introduced in openSuSe 11.4, because other users states, that it works on openSuSe 11.3 for more detail please see thread on the forum http://forums.opensuse.org/english/get-technical-help-here/network-internet/... Reproducible: Always Steps to Reproduce: try to execute following perl script: use LWP::UserAgent; $ENV{PERL_LWP_SSL_VERIFY_HOSTNAME} = 0; $ENV{HTTPS_PKCS12_FILE} = 'FILENAME.pfx'; $ENV{HTTPS_PKCS12_PASSWORD} = 'PASSWORD'; my $ua = LWP::UserAgent->new; my $response = $ua->get('https://example.com/logon.asp'); print $response->content, "\n"; Actual Results: prints website response about missing certificate Expected Results: should print at least an error message about missing certificate file if supplied file is missing, or, if every things fine, should print response from website for more detail please see thread on the forum http://forums.opensuse.org/english/get-technical-help-here/network-internet/... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=742084 https://bugzilla.novell.com/show_bug.cgi?id=742084#c zj jia <zjjia@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zjjia@suse.com AssignedTo|bnc-team-screening@forge.pr |mls@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=742084 https://bugzilla.novell.com/show_bug.cgi?id=742084#c Michael Schröder <mls@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|mls@suse.com |vcizek@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=742084 https://bugzilla.novell.com/show_bug.cgi?id=742084#c1 Vitezslav Cizek <vcizek@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED CC| |vcizek@suse.com --- Comment #1 from Vitezslav Cizek <vcizek@suse.com> 2012-01-20 12:17:26 CET --- In both 11.4 and 12.1 there's LWP 6, This versions prefer IO-Socket-SSL over Crypt-SSLeay, because Crypt-SSLeay don't support hostname verification. The environment variables you set (HTTPS_PKCS12_FILE and HTTPS_PKCS12_PASSWORD) are specific to Crypt-SSLeay. The IO-Socket-SSL ignores them. If you really need to use Crypt-SSLeay, you can force LWP to use it: use Net::SSL (); BEGIN { $Net::HTTPS::SSL_SOCKET_CLASS = "Net::SSL"; } -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=742084 https://bugzilla.novell.com/show_bug.cgi?id=742084#c2 Vitezslav Cizek <vcizek@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |WONTFIX --- Comment #2 from Vitezslav Cizek <vcizek@suse.com> 2012-02-10 12:53:53 CET --- Closing as WONTFIX. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com