cURL cURL > Mailing List > Monthly Index > Single Mail

curl-tracker Archives

[curl:bugs] #1381 Problem with proxy CONNECT using wrong auth then re-used

From: Daniel Stenberg <bagder_at_users.sf.net>
Date: Mon, 25 Aug 2014 12:25:09 +0000

- **status**: open-confirmed --> closed-fixed
- **Comment**:

Thanks, I've now pushed this fit to git without any new test case since it turned out so complicated and time-consuming to make one. Hopefully I get around to adding one in a future!

---
** [bugs:#1381] Problem with proxy CONNECT using wrong auth then re-used**
**Status:** closed-fixed
**Created:** Wed Jun 11, 2014 02:07 PM UTC by Marcel Raad
**Last Updated:** Fri Aug 01, 2014 12:11 PM UTC
**Owner:** Daniel Stenberg
I'm using libcurl 7.37.0 (built with SSPI on Windows) and I'm trying to establish a proxy tunnel through a squid 3.2.11 proxy, which sends "Connection: Keep-Alive" with 407 responses. Both CURLOPT_HTTPPROXYTUNNEL and CURLOPT_CONNECT_ONLY are set to 1. When I use the easy API, everything works as expected, and also when I use a proxy that sends "(Proxy-)Connection: Close" with 407 responses, as the connection is not reused in this case.
But when I use the multi API and I don't submit valid proxy credentials for the first transfer, the connection gets reused for the second transfer (now with valid credentials). Because the first socket is then still valid in Curl_setup_conn, multi_runsingle switches immediately from CURLM_STATE_CONNECT to CURLM_STATE_DO, skipping proxy authentication, and then immediately to CURLM_STATE_DONE because of the connect_only option. libcurl then tells me that the connection was successful, but I cannot use the socket as the CONNECT still has not succeeded because of the missing proxy authentication.
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.
Received on 2014-08-25

These mail archives are generated by hypermail.