[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-core-devel
Subject:    Problem with konqueror and https POST
From:       Matthias Welwarsky <matze () stud ! fbi ! fh-darmstadt ! de>
Date:       2002-03-30 10:44:02
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

I found that html forms are working quite unreliable when the form action is a 
https POST request. Somehow konqueror fails to actually post the form data. 
I've been looking at it for some time now, yet I don't see a point where I 
could start. The output of a POST request (from debug area 1110) looks like 
this:

kio_http_debug: (8119) HTTPProtocol::special
kio_http_debug: (8119) HTTPProtocol::post 
https://stud.fbi.fh-darmstadt.de/mailman/admin/fachschaften
kio_http_debug: (8119) Using proxy: false
kio_http_debug: (8119)   URL:
kio_http_debug: (8119)   Realm:
kio_http_debug: (8119) HTTPProtocol::httpOpen
kio_http_debug: (8119) Response code: 0
kio_http_debug: (8119) POST'ing live data...
- --- kio_http_debug: (8119)Content-Length: 543

kio_http_debug:
kio_http_debug: (8119) HTTPProtocol::httpCloseConnection
kio_http_debug: (8119) HTTPProtocol::httpOpen
kio_http_debug: (8119) HTTPProtocol::httpOpenConnection
kssl: TCPSlaveBase::doSSLHandShake:
kssl: KSSL initialize
kssl: Cipher list: 
RC4-MD5:RC4-SHA:IDEA-CBC-SHA:DES-CBC3-SHA:RC2-CBC-MD5:DES-CBC3-MD5:EDH-RSA-DES-CBC3-SH \
A:EDH-DSS-DES-CBC3-SHA:DH-RSA-DES-CBC3-SHA:DH-DSS-DES-CBC3-SHA:ADH-DES-CBC3-SHA:DHE-DS \
S-RC4-SHA:FZA-RC4-SHA:ADH-RC4-MD5:RC4-64-MD5:EXP1024-DHE-DSS-RC4-SHA:EXP1024-RC4-SHA:E \
XP1024-DHE-DSS-DES-CBC-SHA:EXP1024-DES-CBC-SHA:EXP1024-RC2-CBC-MD5:EXP1024-RC4-MD5:EDH \
-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DH-RSA-DES-CBC-SHA:DH-DSS-DES-CBC-SHA:DES-CBC-SHA \
:ADH-DES-CBC-SHA:DES-CBC-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-EDH-RSA-DES-CBC-SHA:EXP-E \
DH-DSS-DES-CBC-SHA:EXP-DH-RSA-DES-CBC-SHA:EXP-DH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-ADH-DES-CBC-SHA:EXP-ADH-RC4-MD5
                
kssl: Setting real hostname: stud.fbi.fh-darmstadt.de
kssl: KSSL connected OK
kssl: Matching CN=[stud.fbi.fh-darmstadt.de] to [stud.fbi.fh-darmstadt.de]
kssl: SSL HTTP frame the parent? TRUE
kssl: SSL connection information follows:
kssl: +-----------------------------------------------
kssl: | Cipher: RC4-MD5
kssl: | Description: RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  
Enc=RC4(128)  Mac=MD5
kssl:
kssl: | Version: TLSv1/SSLv3
kssl: | Strength: 128 of 128 bits used.
kssl: | PEER:
kssl: | Subject: /C=DE/ST=Hessen/L=Darmstadt/O=Fachschaft Informatik 
FHD/OU=Webserver 
Team/CN=stud.fbi.fh-darmstadt.de/Email=admin@stud.fbi.fh-darmstadt.de
kssl: | Issuer: /C=DE/ST=Hessen/L=Darmstadt/O=Fachschaft Informatik 
FHD/OU=Certificate Authority/CN=FSI-CA/Email=admin@stud.fbi.fh-darmstadt.de
kssl: | Validation: 5
kssl: | Certificate matches IP: true
kssl: +-----------------------------------------------
kio_http_debug: (8119) Sending connected @ 1017484448
kio_http_debug: (8119) Response code: 0
kio_http_debug: (8119) POST'ing live data...
kio_http_debug: (8119)Content-Length: 0

kio_http_debug:
kio_http_debug: (8119) Content-type: text/html
kio_http_debug: (8119) Emitting mimetype text/html
kio_http_debug: (8119) Cache, not adding 
"https://stud.fbi.fh-darmstadt.de/mailman/admin/fachschaften"
kio_http_debug: (8119) Previous Response: 0
kio_http_debug: (8119) Current Response: 200
Drawing normal mask
Drawing normal mask
kio_http_debug: (8119) Chunk trailer = ""
kio_http_debug: (8119) HTTPProtocol::httpClose: keep alive
kio_http_debug: (8119) HTTPProtocol::slave_status

I'm not sure how to interpret this: It seems like there are two POSTs. The 
first has a content length of 543 (look at the --- marked line). Then the SSL 
handshake is done, afterwards it apparently sends another POST, this time 
with content length 0. I'm a little stuck here. Why should this happen? Form 
actions work fine when used without https, and they _sometime_ work with 
https, too, but not reliably.

any clues?

regards,
	Matze
 

- -- 
Matthias Welwarsky
Fachschaft Informatik FH Darmstadt
Email: matze@stud.fbi.fh-darmstadt.de

"all software sucks equally, but some software is more equal"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8pZb2ANO+fpRuZ2IRAidxAJ4nE2aLq4nBZzQ89c2d34Rnx2xr3wCeJNsK
Q6qyUg2TFR5zNfhLx8XuFnQ=
=/wW4
-----END PGP SIGNATURE-----


[prev in list] [next in list] [prev in thread] [next in thread]