Bugs item #1236517, was opened at 2005-07-12 08:57
Message generated for change (Comment added) made by bagder
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1236517&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: https
Group: wrong behaviour
Status: Open
>Resolution: Later
Priority: 6
Submitted By: shuggins (shuggins)
Assigned to: Daniel Stenberg (bagder)
Summary: Problem posting large data using ssl

Initial Comment:
There seems to be a problem using command line curl
with ssl, when posting a large amount of data.

curl -3 -H "application/x-www-form-urlencoded" -d
"xml=some really big base64 encoded xml here" -k
https://www.anyserver.com

I have run on the dos command line (using PHP exec
command):
curl 7.12.2 (i386-pc-win32) libcurl/7.12.2
OpenSSL/0.9.7b zlib/1.2.1
Protocols: ftp gopher telnet dict ldap http file https ftps
Features: NTLM SSL libz

And on a Sun unix command line:
curl 7.10.2 (sparc-sun-solaris2.8) libcurl/7.10.2
OpenSSL/0.9.6g zlib/1.1.3

Same problem using PHP:

$ch = curl_init($url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER,1); //return as
a variable
curl_setopt($ch, CURLOPT_POST, 1); //set POST method
curl_setopt($ch, CURLOPT_POSTFIELDS, $request); //set
the POST variables
$response = curl_exec($ch); //run the whole process and
return the response
curl_close($ch); //close the curl handle

Now, all of these methods seem to work fine if I don't
use ssl. It also works fine if I use small XML's. I
must use a form style POST per my vendor's requirements.

Seems like it's an SSL bug.

----------------------------------------------------------------------

>Comment By: Daniel Stenberg (bagder)
Date: 2005-07-31 00:27

Message:
Logged In: YES
user_id=1110

I haven't had any time to check into this.

----------------------------------------------------------------------

Comment By: shuggins (shuggins)
Date: 2005-07-14 05:27

Message:
Logged In: YES
user_id=869892

The problem seems to be with the command line and shells. I
was able to get the PHP curl working fine (I was not calling
the cert properly).

Windows works with no ssl at least up to a data size of 60k,
but only 2-4k with ssl. I still don't know why that would
make a difference. Interestingly, the magic limit seems to
be slightly different for different servers. I posted data
to https://www.yahoo.com and was able to post about 4k.
Upon success, it just returns their homepage. This may be a
windows limitation.

I have not been able to fully test yet on Unix, but the
basic problem still seems to be when using ssl there is a
size limitation (on the command line or shell).

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-07-13 00:14

Message:
Logged In: YES
user_id=1110

you figured out the magic limit when the problem starts?

Do you see this problem against several servers or just one?

----------------------------------------------------------------------

Comment By: shuggins (shuggins)
Date: 2005-07-12 10:13

Message:
Logged In: YES
user_id=869892

I have attached my sample file. It is a base64 encoded pdf
file stuffed into xml and url encoded. I am sending this
blob over to a server as a form post: xml=blah. The non-ssl
still works.

Same problem with latest curl:

curl 7.14.0 (i586-pc-mingw32msvc) libcurl/7.14.0
OpenSSL/0.9.8 zlib/1.2.2
Protocols: ftp gopher telnet dict ldap http file https ftps
Features: Largefile NTLM SSL libz

I have not tried new version of curl on Unix.

I should get back an xml response and do for http. Using
ssl, I am only getting an empty result and the request is
not hitting the code on ther server side (webserver, maybe).

I did notice that I received a 55 error at least one time.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-07-12 09:16

Message:
Logged In: YES
user_id=1110

and you should also consider upgrading your OpenSSL version(s)

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2005-07-12 09:14

Message:
Logged In: YES
user_id=1110

Can you please try to upgrade to 7.14.0 and see if the
problem persists? We have fixed some SSL-related stuff since
your version.

If the problem is still there after an upgrade, can you show
and explain with more details what goes wrong? Like: what
does curl send, what does it receive and what was it
expected to send and receive...

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1236517&group_id=976
_______________________________________________
http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-tracker
Received on 2005-07-31