Re: http authentication on lftp 4.7.x versions

Hi,

Thanks for the reply.

here is the debug output from 4.7.1, i used debug 3 command:

---- Connecting to www.mufley.com (91.121.140.194) port 443
Certificate depth: 0; subject: /C=uk/ST=berkshire/L=reading/O=mufley dot 
com/CN=www.mufley.com/[email protected]; issuer: 
/C=uk/ST=berkshire/O=mufley dot com/CN=mufley dot 
com/[email protected]
WARNING: Certificate verification: unable to get local issuer 
certificate 
(B6:69:00:52:0E:A7:FC:4A:05:33:18:FE:BE:B0:D9:70:63:78:19:90)
WARNING: Certificate verification: unable to verify the first 
certificate 
(B6:69:00:52:0E:A7:FC:4A:05:33:18:FE:BE:B0:D9:70:63:78:19:90)

and then repeats itself until i press CTRL-C.
and i did "set ssl:verify-certificate no"

fred

On 2016-05-04 12:22, Alexander Lukyanov wrote:
> Please send me the debug output. In 4.7.0 the http authentication was
> reworked, so there can be a bug indeed.
> 
> пн, 2 мая 2016 г. в 13:20, Frederico Costa
> <[email protected]>:
> 
>> Hi there,
>> 
>> I have been using lftp for some years now, and has been working
>> smoothly
>> i can say.
>> 
>> Now i have upgrade to version 4.7.1, and it seems i am having a bit
>> of
>> an issue when comes to http authentication.
>> 
>> So, my setup is rather simple, and it has been running for some
>> years,
>> through a crontab on a daily task to get the latest backup files
>> from an
>> external server.
>> 
>> command from crontab:
>> 
>> /usr/local/bin/lftp -f /usr/home/user/scripts/backup.lftp
>> 
>> the content of the script (backup.lftp) i am running
>> --
>> set mirror:order "backup*"
>> set http:authorization user:pass
>> set ssl:verify-certificate no
>> open https://www.mysite.com/transfer
>> mirror -c --Remove-source-files home /data/public/backup &
>> at 0610  -- exit top kill &
>> --
>> 
>> This has been running without any problems up to version 4.6.5:
>> --
>> 4.6.5
>> lftp :~> set mirror:order "backup*"
>> lftp :~> set http:authorization user:pass
>> lftp :~> set ssl:verify-certificate no
>> lftp :~> open https://www.mysite.com/transfer
>> cd: received redirection to `https://www.mysite.com/transfer/'
>> cd ok, cwd=/transfer
>> lftp www.mufley.com:/transfer> mirror -c --Remove-source-files home
>> /data/public/backup
>> 
>> web logs
>> mysite.com [1] - transftp [02/May/2016:09:54:03 +0100] "HEAD
>> /transfer
>> HTTP/1.1" 301 - "-" "lftp/4.6.5"
>> mysite.com [1] - transftp [02/May/2016:09:54:03 +0100] "HEAD
>> /transfer/
>> HTTP/1.1" 200 - "-" "lftp/4.6.5"
>> --
>> 
>> I have upgraded this weekend to version 4.7.1 (tested also on
>> 4.7.0),
>> and now:
>> --
>> 4.7.0/1
>> lftp :~> set mirror:order "backup*"
>> lftp :~> set http:authorization user:pass
>> lftp :~> set ssl:verify-certificate no
>> lftp :~> open https://www.mysite.com/transfer
>> (it will cycle now through the below messages)
>> cd `https://www.mufley.com/transfer' [Connecting...]
>> cd `https://www.mufley.com/transfer' [Fetching headers...]
>> cd `https://www.mufley.com/transfer' [Waiting for response...]
>> 
>> web logs
>> mysite.com [1] - - [02/May/2016:10:57:17 +0100] "HEAD /transfer
>> HTTP/1.1"
>> 401 - "-" "lftp/4.7.0"
>> mysite.com [1] - - [02/May/2016:10:57:17 +0100] "HEAD /transfer
>> HTTP/1.1"
>> 401 - "-" "lftp/4.7.0"
>> mysite.com [1] - - [02/May/2016:10:57:17 +0100] "HEAD /transfer
>> HTTP/1.1"
>> 401 - "-" "lftp/4.7.0"
>> --
>> 
>> No changes have been done to the webserver, and when i use back
>> again
>> version 4.6.5 every works fine.
>> 
>> So it seems on the 4.7.x the server replies with a 401 Unauthorized,
>> instead of the 301 redirect and 200 ok.
>> From what i can understand this seems to be related to the new http
>> authentication functionality that has been added to 4.7.x.
>> 
>> Maybe i am missing something in the scripts to be updated to run
>> correclty on 4.7.x versions?
>> I tried to look into the code, but it will take me a bit of time to
>> understand, so i decided to drop you this email.
>> 
>> Can you check this when you have some time? Or do you need more
>> information, or more debug done?
>> I will be more than happier to help.
>> 
>> Looking forward to some feedback...
>> 
>> Fred
>> 
>> _______________________________________________
>> lftp mailing list
>> [email protected]
>> http://univ.uniyar.ac.ru/mailman/listinfo/lftp
> 
> 
> Links:
> ------
> [1] http://mysite.com

_______________________________________________
lftp mailing list
[email protected]
http://univ.uniyar.ac.ru/mailman/listinfo/lftp