Bugs item #1236517, was opened at 2005-07-12 08:57
Message generated for change (Comment added) made by bagder
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1236517&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: https
Group: wrong behaviour
Status: Open
>Resolution: Works For Me
Priority: 6
Submitted By: shuggins (shuggins)
Assigned to: Daniel Stenberg (bagder)
Summary: Problem posting large data using ssl

Initial Comment:
There seems to be a problem using command line curl
with ssl, when posting a large amount of data.

curl -3 -H "application/x-www-form-urlencoded" -d
"xml=some really big base64 encoded xml here" -k
https://www.anyserver.com

I have run on the dos command line (using PHP exec
command):
curl 7.12.2 (i386-pc-win32) libcurl/7.12.2
OpenSSL/0.9.7b zlib/1.2.1
Protocols: ftp gopher telnet dict ldap http file https ftps
Features: NTLM SSL libz

And on a Sun unix command line:
curl 7.10.2 (sparc-sun-solaris2.8) libcurl/7.10.2
OpenSSL/0.9.6g zlib/1.1.3

Same problem using PHP:

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); //return as
a variable
curl_setopt($ch, CURLOPT_POST, 1); //set POST method
curl_setopt($ch, CURLOPT_POSTFIELDS, $request); //set
the POST variables
$response = curl_exec($ch); //run the whole process and
return the response
curl_close($ch); //close the curl handle

Now, all of these methods seem to work fine if I don't
use ssl. It also works fine if I use small XML's. I
must use a form style POST per my vendor's requirements.

Seems like it's an SSL bug.

----------------------------------------------------------------------

>Comment By: Daniel Stenberg (bagder)
Date: 2005-08-18 13:41

Message:
Logged In: YES
user_id=1110

I can only suspect that this is something problematic in
your end, I can easily POST 1MB data over HTTPS and asking
on the libcurl mailing list no other person replied having
the same problem as you!

Are you testing this against one of your own servers?

Also, the fact that it works with PHP but not the shell is
another inidication that this is not a curl problem but
something else.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-07-31 00:27

Message:
Logged In: YES
user_id=1110

I haven't had any time to check into this.

----------------------------------------------------------------------

Comment By: shuggins (shuggins)
Date: 2005-07-14 05:27

Message:
Logged In: YES
user_id=869892

The problem seems to be with the command line and shells. I
was able to get the PHP curl working fine (I was not calling
the cert properly).

Windows works with no ssl at least up to a data size of 60k,
but only 2-4k with ssl. I still don't know why that would
make a difference. Interestingly, the magic limit seems to
be slightly different for different servers. I posted data
to https://www.yahoo.com and was able to post about 4k.
Upon success, it just returns their homepage. This may be a
windows limitation.

I have not been able to fully test yet on Unix, but the
basic problem still seems to be when using ssl there is a
size limitation (on the command line or shell).

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-07-13 00:14

Message:
Logged In: YES
user_id=1110

you figured out the magic limit when the problem starts?

Do you see this problem against several servers or just one?

----------------------------------------------------------------------

Comment By: shuggins (shuggins)
Date: 2005-07-12 10:13

Message:
Logged In: YES
user_id=869892

I have attached my sample file. It is a base64 encoded pdf
file stuffed into xml and url encoded. I am sending this
blob over to a server as a form post: xml=blah. The non-ssl
still works.

Same problem with latest curl:

curl 7.14.0 (i586-pc-mingw32msvc) libcurl/7.14.0
OpenSSL/0.9.8 zlib/1.2.2
Protocols: ftp gopher telnet dict ldap http file https ftps
Features: Largefile NTLM SSL libz

I have not tried new version of curl on Unix.

I should get back an xml response and do for http. Using
ssl, I am only getting an empty result and the request is
not hitting the code on ther server side (webserver, maybe).

I did notice that I received a 55 error at least one time.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-07-12 09:16

Message:
Logged In: YES
user_id=1110

and you should also consider upgrading your OpenSSL version(s)

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-07-12 09:14

Message:
Logged In: YES
user_id=1110

Can you please try to upgrade to 7.14.0 and see if the
problem persists? We have fixed some SSL-related stuff since
your version.

If the problem is still there after an upgrade, can you show
and explain with more details what goes wrong? Like: what
does curl send, what does it receive and what was it
expected to send and receive...

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1236517&group_id=976
_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-tracker
Received on 2005-08-18