Comment 4 for bug 501557

Revision history for this message
Patola (patola) wrote :

Just installed the libwww-curl-perl_4.09-1+b1_i386.deb package from Debian and the authentication didn't work, with the exact same error message of 4.07. Reverted back to 4.05 and it worked again, with the exact same debug information also. Here, again, is the authentication that worked:

* About to connect() to xxxxxx.xxx.xxx.com port 443 (#0)
* Trying 200.200.200.200... * connected
* Connected to xxxxxx.xxx.xxx.com (200.200.200.200) port 443 (#0)
* successfully set certificate verify locations:
* CAfile: none
  CApath: /etc/ssl/certs
* SSL connection using AES256-SHA
* Server certificate:
* subject: C=US, ST=New York, L=Poughkeepsie, O=IBM, CN=xxxxxx.xxx.xxx.com
* start date: 2009-10-04 17:17:20 GMT
* expire date: 2012-10-05 22:53:18 GMT
* issuer: C=US, O=Equifax, OU=Equifax Secure Certificate Authority
* SSL certificate verify ok.
> POST /sdm/j_security_check HTTP/1.1
User-Agent: Mozilla/5.0 (compatible; MSIE 6.01; Windows NT 5.0)
Host: xxxxxx.xxx.xxx.com
Accept: */*
Content-Length: 107
Content-Type: application/x-www-form-urlencoded

Using ldd on 4.09's Curl.so, the libraries are identical to 4.07, which confirmed my suspicion that 4.09 is also compiled without libssl. So, I still think that for this authentication to work we need libssl back onto libwww-curl-perl.