-
-
Notifications
You must be signed in to change notification settings - Fork 6.9k
Closed
Labels
Description
we used curl as HTTP proxy tunnel and found an issue after upgrade to 7.42.1, that curl closed the connection after create the proxy tunnel immediately
the curl log as follows
8/10/2015 9:12:54:674 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Rebuilt URL to: 54.223.160.188/
8/10/2015 9:12:54:674 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]- Trying 10.110.5.153...
8/10/2015 9:12:54:674 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connected to 10.110.5.153 (10.110.5.153) port 8080 (#0)
8/10/2015 9:12:54:674 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.187:443
8/10/2015 9:12:54:674 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.187:443 HTTP/1.1
8/10/2015 9:12:54:674 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connected to 10.110.5.153 (10.110.5.153) port 8080 (#0)
8/10/2015 9:12:54:674 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.188:443
8/10/2015 9:12:54:674 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.188:443 HTTP/1.1
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. )
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Via: 1.1 PDC
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Negotiate
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Kerberos
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: NTLM
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Connection: close
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Connection: close
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Pragma: no-cache
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Cache-Control: no-cache
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Type: text/html
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Length: 652
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Ignore 652 bytes of response-body
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connect me again please
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Found bundle for host 54.223.160.187: 0x2fa4cff0
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. )
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Hostname 10.110.5.153 was found in DNS cache
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Via: 1.1 PDC
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Negotiate
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Kerberos
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: NTLM
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Connection: close
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Connection: close
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Pragma: no-cache
8/10/2015 9:12:54:675 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]- Trying 10.110.5.153...
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Cache-Control: no-cache
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Type: text/html
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Length: 652
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Ignore 652 bytes of response-body
8/10/2015 9:12:54:675 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connect me again please
8/10/2015 9:12:54:676 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Found bundle for host 54.223.160.188: 0x29b9cff0
8/10/2015 9:12:54:676 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Hostname 10.110.5.153 was found in DNS cache
8/10/2015 9:12:54:676 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]- Trying 10.110.5.153...
8/10/2015 9:12:54:676 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connected to 10.110.5.153 (10.110.5.153) port 8080 (#1)
8/10/2015 9:12:54:676 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.187:443
8/10/2015 9:12:54:676 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.187:443 HTTP/1.1
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. )
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Via: 1.1 PDC
8/10/2015 9:12:54:677 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connected to 10.110.5.153 (10.110.5.153) port 8080 (#1)
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Negotiate
8/10/2015 9:12:54:677 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.188:443
8/10/2015 9:12:54:677 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.188:443 HTTP/1.1
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Kerberos
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: NTLM
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Connection: close
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Connection: close
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Pragma: no-cache
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Cache-Control: no-cache
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Type: text/html
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Length: 652
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Ignore 652 bytes of response-body
8/10/2015 9:12:54:677 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. )
8/10/2015 9:12:54:677 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Via: 1.1 PDC
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connect me again please
8/10/2015 9:12:54:677 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Negotiate
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Found bundle for host 54.223.160.187: 0x2fa4cff0
8/10/2015 9:12:54:677 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Hostname 10.110.5.153 was found in DNS cache
8/10/2015 9:12:54:678 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]- Trying 10.110.5.153...
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Kerberos
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: NTLM
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Connection: close
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Connection: close
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Pragma: no-cache
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Cache-Control: no-cache
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Type: text/html
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Length: 652
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Ignore 652 bytes of response-body
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connect me again please
8/10/2015 9:12:54:678 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connected to 10.110.5.153 (10.110.5.153) port 8080 (#2)
8/10/2015 9:12:54:678 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.187:443
8/10/2015 9:12:54:678 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Proxy auth using Negotiate with user 'platform-hz\victor'
8/10/2015 9:12:54:678 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Found bundle for host 54.223.160.188: 0x29b9cff0
8/10/2015 9:12:54:679 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Hostname 10.110.5.153 was found in DNS cache
8/10/2015 9:12:54:679 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]- Trying 10.110.5.153...
8/10/2015 9:12:54:680 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.187:443 HTTP/1.1
8/10/2015 9:12:54:680 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Connected to 10.110.5.153 (10.110.5.153) port 8080 (#2)
8/10/2015 9:12:54:680 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.188:443
8/10/2015 9:12:54:680 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Proxy auth using Negotiate with user 'platform-hz\victor'
8/10/2015 9:12:54:680 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.188:443 HTTP/1.1
8/10/2015 9:12:54:680 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-HTTP/1.1 407 Proxy Authentication Required ( 拒绝访问。 )
8/10/2015 9:12:54:680 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Via: 1.1 PDC
8/10/2015 9:12:54:680 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Negotiate <REMOVED>
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-HTTP/1.1 407 Proxy Authentication Required ( 拒绝访问。 )
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Via: 1.1 PDC
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Authenticate: Negotiate <REMOVED>
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Connection: Keep-Alive
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Connection: Keep-Alive
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Pragma: no-cache
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Cache-Control: no-cache
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Connection: Keep-Alive
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Type: text/html
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Connection: Keep-Alive
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Length: 0
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Pragma: no-cache
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Cache-Control: no-cache
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-TUNNEL_STATE switched to: 0
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Type: text/html
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.187:443
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Content-Length: 0
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-TUNNEL_STATE switched to: 0
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Establish HTTP proxy tunnel to 54.223.160.188:443
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Proxy auth using Negotiate with user 'platform-hz\victor'
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Proxy auth using Negotiate with user 'platform-hz\victor'
8/10/2015 9:12:54:681 UTIL [141120:184132] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.187:443 HTTP/1.1
8/10/2015 9:12:54:681 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[2]-CONNECT 54.223.160.188:443 HTTP/1.1
8/10/2015 9:12:54:771 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-HTTP/1.1 200 Connection established
8/10/2015 9:12:54:771 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Via: 1.1 PDC
8/10/2015 9:12:54:771 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Connection: Keep-Alive
8/10/2015 9:12:54:771 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-Proxy-Connection: Keep-Alive
8/10/2015 9:12:54:771 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[1]-
8/10/2015 9:12:54:771 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Proxy replied OK to CONNECT request
8/10/2015 9:12:54:772 UTIL [141120:185628] INFO curl_connector_t::my_curl_log_callback, text_buff = cURL:type[0]-Closing connection 2
I debug the curl and found the issue from a new patch
http://curl.haxx.se/CVE-2015-3148.patch
the issue could be fixed after avoid close the connection for case 200 as follows
if((data->req.httpcode != 401) && (data->req.httpcode != 407)&& (data->req.httpcode != 200))
connclose(conn, "Negotiate transfer completed");
Is it right or I missed anything for this case?