libcurl3 causes https file upload to fail in flash player 10

[Luis Arias]

Contrary to reports mentioned in this post on Adobe's jira:

(See http://www.pavlasek.sk/devel/?p=10)

Flash Player 10 will successfully upload using Flex's FileReference.upload method on http and https on firefox in a clean jaunty installation. I recently came across a systematic failure of this method on https on my personal jaunty installation and tracked it down to having installed curl (and thus dependent package libcurl3).

If libcurl3 is installed on top of a clean jaunty installation file upload will fail on https. The reason seems to have something to do with invalid handling of TLSV1 with libcurl3 installed since I saw an error in wireshark with a TLS frame being returned stating "Fatal, Unexpected Message". I suspect a difference in implementation between OpenSSL and / Gnu TLS. Flash player in firefox / linux makes its own http or https connections instead of going through the browser when doing file upload.

[Brian Murray (brian-murray)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. Could you please provide a web site that uses this functionality so others can test this bug? Thanks in advance.

[Luis Arias (kaaloo)]

Hi, it may be hard to find a public site that uploads with ssl. I personally noticed the problem on our mybalsamiq.com site which is ssl only but is currently in private beta. I can send an invite to a project to you on the site where you can try an upload with libcurl installed and not installed and you can see the difference. Please let me know if that can help.