HTTPFORM not working with SSL/TLS
"stas.fastov via SASL" <[email protected]> Thu, 25 Sep 2025 13:51:25 +0000
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
--17588082851.20dbaC993.2533 Date: Thu, 25 Sep 2025 13:51:25 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hello, I'd like to understand whether the *httpform* mechanism for *saslauthd*=C2= =A0is capable to use SSL/TLS protocol. I've built cyrus-sasl with these flags: =C2=A0 ./configure --with-openssl --enable-httpform --with-saslauthd. OS: Ubuntu 24.04 Then I've set=20 httpform_host: id.my.server.com httpform_port: 443 httpform_uri: /connect/token httpform_data: grant_type=3Dpassword&client_id=3Dmy-client&client_secret=3D= XXX&username=3D%u&password=3D%p httpform_require: 200,access_token When trying to send test auth requests, I see plain HTTP request and respon= se in tcpdump saying **400 Bad request - plain http request was sent to htt= ps port**. Is httpform able to use SSL/TLS? How do I configure it to use SSL/TLS? ------------------------------------------ Cyrus: SASL Permalink: https://cyrus.topicbox.com/groups/sasl/Tef16c2888e2b2c3c-M7ee51b= 698542272ea536879e Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription --17588082851.20dbaC993.2533 Date: Thu, 25 Sep 2025 13:51:25 +0000 MIME-Version: 1.0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable <!DOCTYPE html> <html><html><html><body><div>Hello,<br /></div><div><br /></div><div>I'= d like to understand whether the <b>httpform</b> mechanism for <b>saslauthd= </b> is capable to use SSL/TLS protocol.<br /></div><div>I've buil= t cyrus-sasl with these flags:<br /></div><div> ./configure --with-op= enssl --enable-httpform --with-saslauthd.<br /></div><div>OS: Ubuntu 24.04<= /div><div><br /></div><div>Then I've set <br /></div><pre style=3D"marg= in: 7px 0px; border-radius: 3px; border: 1px solid rgb(204, 204, 204); padd= ing: 7px 10px; background: rgb(246, 246, 246); font-family: menlo, consolas= , monospace; font-size: 90%; white-space: pre-wrap; overflow-wrap: break-wo= rd; --darkreader-inline-border-top: var(--darkreader-border-cccccc, #3e4547= ); --darkreader-inline-border-right: var(--darkreader-border-cccccc, #3e454= 7); --darkreader-inline-border-bottom: var(--darkreader-border-cccccc, #3e4= 547); --darkreader-inline-border-left: var(--darkreader-border-cccccc, #3e4= 547); --darkreader-inline-bgimage: initial; --darkreader-inline-bgcolor: va= r(--darkreader-background-f6f6f6, #1a1d1e);">httpform_host: id.my.server.com httpform_port: 443 httpform_uri: /connect/token httpform_data: grant_type=3Dpassword&client_id=3Dmy-client&client_s= ecret=3DXXX&username=3D%u&password=3D%p httpform_require: 200,access_token<br /></pre><div>When trying to send test= auth requests, I see plain HTTP request and response in tcpdump saying <i>= <b>400 Bad request - plain http request was sent to https port</b></i>.<br = /></div><div><br /></div><div>Is httpform able to use SSL/TLS? How do I con= figure it to use SSL/TLS?</div><div id=3D"topicbox-footer" style=3D"margin:= 10px 0 0;border-top:1px solid #ddd;border-color:rgba(0,0,0,.15);padding:7px= 0;"> <strong><a href=3D"https://cyrus.topicbox.com/latest" style=3D"color:inheri= t;text-decoration:none">Cyrus</a></strong> / SASL / see <a href=3D"https://cyrus.topicbox.com/groups/sasl">discussions</a> + <a href=3D"https://cyrus.topicbox.com/groups/sasl/members">participants</a> + <a href=3D"https://cyrus.topicbox.com/groups/sasl/subscription">delivery&nb= sp;options</a> <a href=3D"https://cyrus.topicbox.com/groups/sasl/Tef16c2888e2b2c3c-M7ee51b= 698542272ea536879e" style=3D"float:right">Permalink</a> </div> </body></html></html></html>= --17588082851.20dbaC993.2533--