Bugs item #2487577, was opened at 2009-01-05 12:13
Message generated for change (Comment added) made by bagder
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2487577&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: SSL/TLS
Group: hang
>Status: Closed
Resolution: Works For Me
Priority: 5
Private: No
Submitted By: Romil Mittal (romilmittal)
Assigned to: Daniel Stenberg (bagder)
Summary: curl and libcurl hang while accessing ebay url

Initial Comment:
Access this url - https://api.ebay.com/ws/api.dll a few times (8-10 times) using command line curl:

"curl https://api.ebay.com/ws/api.dll"

After trying it for 5-6 times, it will hang.

I am able to reproduce the issue with older curls as well as the latest 7.19 version.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2009-02-22 13:10

Message:
Due to lack of feedback/response in this bug report, we close it.

Should there appear an informational response later on, we can
always re-open it again.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2009-01-15 22:02

Message:
Since I cannot repeat this, I don't know what else I can do. I suggest you
roll up your sleeves and start debugging this yourself: I suggest stracing
and gdb'ing the running process to see exactly what it does or wants to do
when it "hangs".

One of your user-agent strings said "OpenSSL/0.9.8b" that's a very old
OpenSSL. I trust you've tried this with a (much) newer OpenSSL?

This is just my spare time you know.

----------------------------------------------------------------------

Comment By: Romil Mittal (romilmittal)
Date: 2009-01-15 17:07

Message:
Hi Daniel,

Thanks for your effort. But unfortunately I am able to reproduce the issue
from my home network also. Anyway, now I have asked one my colleagues (in
SJ, California) to try this out from his network. I will update you with
his results by tomorrow.

Daniel, we use curl for one of our products and this issue has kind of
become a show-stopper for us. So it would be really helpful if you could
help us resolving this.

Thanks,
Romil

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2009-01-12 00:44

Message:
I think the problem is rather that something in your network or even the
remote server is now allowing you to do these things repeatedly like this.
It still won't happen to me.

----------------------------------------------------------------------

Comment By: Romil Mittal (romilmittal)
Date: 2009-01-09 07:34

Message:
1. Following is the '-v' output for the case when curl works fine:

$curl -v https://api.ebay.com/ws/api.dll
* About to connect() to api.ebay.com port 443
* Trying 66.135.211.90... connected
* Connected to api.ebay.com (66.135.211.90) port 443
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSLv2, Client hello (1):
SSLv3, TLS handshake, Server hello (2):
SSLv3, TLS handshake, CERT (11):
SSLv3, TLS handshake, Server finished (14):
SSLv3, TLS handshake, Client key exchange (16):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSLv3, TLS change cipher, Client hello (1):
SSLv3, TLS handshake, Finished (20):
SSL connection using RC4-MD5
* Server certificate:
* subject: /C=US/ST=California/L=San Jose/O=eBay Inc./OU=Site
Operations/CN=api.ebay.com
* start date: 2007-08-07 00:00:00 GMT
* expire date: 2009-08-06 23:59:59 GMT
* common name: api.ebay.com (matched)
* issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms
of use at https://www.verisign.com/rpa (c)05/CN=VeriSign Class 3 Secure
Server CA
* SSL certificate verify ok.
> GET /ws/api.dll HTTP/1.1
> User-Agent: curl/7.15.5 (i686-redhat-linux-gnu) libcurl/7.15.5
OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5
> Host: api.ebay.com
> Accept: */*
>
< HTTP/1.1 200 OK
< Date: Fri, 09 Jan 2009 06:30:32 GMT
< Server: Apache-Coyote/1.1
< X-EBAY-API-POOL-NAME: ___cDRidW9ubXFq
< X-EBAY-API-SERVER-NAME: ___dW0ucmd3ajU2Miw0NikyNCgxMCs3NzY/Pjc7NA==
< Content-Type: text/xml
< Content-Length: 330
< X-Cache: MISS from smfapigw006.smf.ebay.com, MISS from
smfapigw006.smf.ebay.com
< Connection: close
Closing connection #0
* SSLv3, TLS alert, Client hello (1):
<?xml version="1.0" encoding="UTF-8" ?><eBay><EBayTime>2009-01-09
06:31:13</EBayTime><Errors><Error><Code>2</Code><ErrorClass>RequestError</ErrorClass><SeverityCode>1</SeverityCode><Severity>SeriousError</Severity><Line>0</Line><Column>0</Column><ShortMessage><![CDATA[
Unsupported verb. ]]></ShortMessage></Error></Errors></eBay>

2. And following is '-v' output when curl hangs:

$curl -v https://api.ebay.com/ws/api.dll
* About to connect() to api.ebay.com port 443
* Trying 66.135.211.89... connected
* Connected to api.ebay.com (66.135.211.89) port 443
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
  CApath: none
* SSLv2, Client hello (1):

So basically, it hangs after doing the first Client hello.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2009-01-06 23:24

Message:
That's pretty much what I did, except that I redirected the output to
/dev/null with -o.

What if you use -v, what is the last things it shows when it gets stuck?

----------------------------------------------------------------------

Comment By: Romil Mittal (romilmittal)
Date: 2009-01-06 08:11

Message:
Hi Daniel (badger),

I tried today on curl 7.16 also and was able to reproduce it in 4 tries
only.

Ok, may I will write the steps in more detail:

1. Open the shell
2. curl https://api.ebay.com/ws/api.dll <enter>
   You will get some output and immediately you run the command again (by
using up arrow and enter keys)
3. curl https://api.ebay.com/ws/api.dll <enter>
4. curl https://api.ebay.com/ws/api.dll <enter>
and like this.

Basically, do not have any delay between running the command in
succession.

Could you please try it again and see if you can reproduce it.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2009-01-05 16:34

Message:
I tried 7.18.2 and 7.19.3-CVS and did 10+ repeats each but failed to repeat

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2487577&group_id=976
Received on 2009-02-22