libwww-curl-perl is compiled without libssl, which breaks functionality
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
libwww-curl-perl (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
Binary package hint: libwww-curl-perl
It might be related to debian bug #520595.
libwww-curl-perl 4.05-1 was compiled with openssl libs, libwww-curl-perl 4.07-1 is compiled without it. That breaks functionality: a program I developed using perl no longer works with an HTTP certificate. When I revert back to 4.05-1 it starts working again.
The differences from 4.05 Curl.so "ldd" command to 4.07's are:
4.05 shows:
< libcurl.so.4
< libssl.so.0.9.8
< libcrypto.so.0.9.8
4.07 shows:
> libcurl-gnutls.so.4
This is actual output from my perl program using libwww-curl-perl 4.07:
*** LOGIN: We'll log in to Maximo.
*** URL: https:/
*** POST: j_username=
**** ONLY_POST: url=https:/
* About to connect() to xxxxxxx.xxx.xxx.com port 443 (#0)
* Trying 200.200.200.200... * connected
* Connected to xxxxxxx.xxx.xxx.com (200.200.200.200) port 443 (#0)
* found 145 certificates in /etc/ssl/
* gnutls_handshake() failed: Decryption has failed.
* Closing connection #0
*** ERROR When try to use url: https:/
-------
When it worked (4.05-1), it went like that:
*** LOGIN: We'll log in to Maximo.
*** URL: https:/
*** POST: j_username=
**** ONLY_POST: url=https:/
* About to connect() to xxxxxx.xxx.xxx.com port 443 (#0)
* Trying 200.200.200.200... * connected
* Connected to xxxxxx.xxx.xxx.com (200.200.200.200) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* SSL connection using AES256-SHA
* Server certificate:
* subject: C=US, ST=New York, L=Poughkeepsie, O=IBM, CN=xxxxxx.
* start date: 2009-10-04 17:17:20 GMT
* expire date: 2012-10-05 22:53:18 GMT
* issuer: C=US, O=Equifax, OU=Equifax Secure Certificate Authority
* SSL certificate verify ok.
> POST /sdm/j_
User-Agent: Mozilla/5.0 (compatible; MSIE 6.01; Windows NT 5.0)
Host: xxxxxx.xxx.xxx.com
Accept: */*
Content-Length: 107
Content-Type: application/
< HTTP/1.1 302 Found
< Date: Tue, 29 Dec 2009 16:49:52 GMT
< Server: IBM_HTTP_
< Location: https:/
* Added cookie LtpaToken2=
< Set-Cookie: LtpaToken2=
* Added cookie LtpaToken=
< Set-Cookie: LtpaToken=
< Content-Length: 0
< Content-Type: text/plain
< Content-Language: en
<
* Connection #0 to host xxxxxx.xxx.xxx.com left intact
* Issue another request to this URL: 'https:/
* Violate RFC 2616/10.3.3 and switch from POST to GET
* Re-using existing connection! (#0) with host xxxxxx.xxx.xxx.com
* Connected to xxxxxx.xxx.xxx.com (200.200.200.200) port 443 (#0)
> GET /sdm/ HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 6.01; Windows NT 5.0)
Host: xxxxxx.xxx.xxx.com
(...)
-------
The code that connects to the SSL host is the following:
$curl-
$curl-
$curl-
$curl-
$curl-
$curl-
$curl-
$curl-
$curl-
$curl-
$curl-
my $response_body='';
# NOTE - do not use a typeglob here. A reference to a typeglob is okay though.
open (my $fileb, ">", \$response_body);
$curl-
if ($options{
# Starts the actual request
my $retcode = $curl->perform;
close ($fileb);
ProblemType: Bug
Architecture: i386
Date: Wed Dec 30 03:52:52 2009
DistroRelease: Ubuntu 9.10
Package: libwww-curl-perl 4.05-1
ProcEnviron:
SHELL=/bin/zsh
PATH=(custom, user)
LANG=pt_BR.UTF-8
LANGUAGE=
ProcVersionSign
SourcePackage: libwww-curl-perl
Uname: Linux 2.6.31-16-generic i686
XsessionErrors:
(gnome-
(gnome-
(nautilus:2789): Eel-CRITICAL **: eel_preferences
(polkit-
(gnome-
Hi,
> libwww-curl-perl 4.05-1 was compiled with openssl libs, libwww-curl-perl
> 4.07-1 is compiled without it. That breaks functionality: a program I
> developed using perl no longer works with an HTTP certificate. When I
> revert back to 4.05-1 it starts working again.
> * About to connect() to xxxxxxx.xxx.xxx.com port 443 (#0) certs/ca- certificates. crt
> * Trying 200.200.200.200... * connected
> * Connected to xxxxxxx.xxx.xxx.com (200.200.200.200) port 443 (#0)
> * found 145 certificates in /etc/ssl/
> * gnutls_handshake() failed: Decryption has failed.
> * Closing connection #0
I cannot reproduce this problem with libwww- curl-perl/ 4.09-1 on Debian
when running the attached test script.
Does the test script work for you? If not, is the problem still present
in Ubuntu Lucid?
Regards,
Ansgar