Re: Safari and firmware upgrade

Manuel Kasper <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
On 17.08.2009, at 17:38, Jeffrey Goldberg wrote:

> I just did a firmware upgrade from embedded-1.3b16 to  
> embedded-1.3b18 (Soekris 4801) and found that the upgrade did not  
> work when I did it with Safari 4.0.3 (OS X 10.5.8, PPC).
>
> After selecting the file to upload and hitting the "Upgrade  
> Firmware" button, Safari just spun its wheel.  During this time (I  
> waited 6 full minutes), m0n0wall continued to function normally.  I  
> eventually did "abort" the upgrade, but there really wasn't anything  
> to abort.  The system continued to run 1.3b16.

The problem with HTTP file uploads from Safari 4 is that it uploads  
the whole file without providing the Authorization header with  
username/password (even though the user has already entered it for the  
given realm). With most web servers, the server will then wait for the  
end of the upload and return a 401 Unauthorized response, upon which  
Safari will send the whole file again, this time with the required  
header - so it works, even if it's inefficient (file sent twice).

mini_httpd (the web server used in m0n0wall) returns the 401 almost  
immediately (after receiving the headers) and closes the connection,  
which Safari doesn't like.

It doesn't look like this is easy to work around in mini_httpd, so it  
will probably simply go in the "known issues" section on the download  
page for 1.3.

- Manuel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.