Bug#701032: wget tries to reuse connection despite http/1.0 and no connection: keep-alive

[Moritz Molle]

Package: wget
Version: 1.13.4-3
Severity: normal
Tags: upstream

* What led up to the situation?

i built a simple webserver with pythons BaseHTTPServer, which
requires a basic http auth. the server answers in http 1.0 and
sends no Connection: keep-alive header.

Now i tried to test it with wget, which sent at first (even though
i gave it user and password) no auth-string, probably to test which
auth-scheme is used.

the server sent a 401 with the WWW-Authenticate: Basic header, and NOW

wget tried to reuse the connection, which is already closed, and
should not have been reused, because there was no Content-length
header, there was no Keep-alive header AND it was http 1.0, but it
did, and the request failed. even though the server didn't do
anything wrong.

* What outcome did you expect instead?

i expected one connection per request which would have worked. i
didn't expect to read 'reusing existing connection' if there was
known to be no keep-alive


-- System Information:
Debian Release: 7.0
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.2.0-4-686-pae (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages wget depends on:
ii dpkg 1.16.9
ii install-info 4.13a.dfsg.1-10
ii libc6 2.13-37
ii libgcrypt11 1.5.0-3
ii libgnutls26 2.12.20-4
ii libgpg-error0 1.10-3.1
ii libidn11 1.25-2
ii zlib1g 1:1.2.7.dfsg-13

wget recommends no packages.

wget suggests no packages.

-- no debconf information


--
To UNSUBSCRIBE, email to debian-bugs-...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

[Noël Köthe]

tags 701032 + moreinfo unreproducible
thanks

Hello Moritz,

Am Mittwoch, den 20.02.2013, 18:56 +0100 schrieb Moritz Molle:

> i built a simple webserver with pythons BaseHTTPServer, which
> requires a basic http auth. the server answers in http 1.0 and
> sends no Connection: keep-alive header.
>
> Now i tried to test it with wget, which sent at first (even though
> i gave it user and password) no auth-string, probably to test which
> auth-scheme is used.
>
> the server sent a 401 with the WWW-Authenticate: Basic header, and NOW
>
> wget tried to reuse the connection, which is already closed, and
> should not have been reused, because there was no Content-length
> header, there was no Keep-alive header AND it was http 1.0, but it
> did, and the request failed. even though the server didn't do
> anything wrong.
>
> * What outcome did you expect instead?
>
> i expected one connection per request which would have worked. i
> didn't expect to read 'reusing existing connection' if there was
> known to be no keep-alive

Maybe the question from Tim didn't reached you:

http://bugs.debian.org/701032

Can you send us the output of --debug?
Addition maybe you could test it with version 1.14 in testing or sid?

Thank you.

--
Noël Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org

[Mr Peter Marcus Ramon]

Hello,
I am Mr. Peter Marcus Ramon, a banker, a France origin but resided here in Cote d Ivoire for work, I stopped at your profile and will love to know more about you,I have a business that will profit both of us in your country that I want us to discuss about. I will be glad to hear from you soon for more details, take care dear.

Mr. Peter Marcus Ramon

[Business Hack]

Hi there,
I hope this email finds you well. As someone who is looking for resources for their online business, I wanted to share with you an incredible resource : Envato Elements.

Do you find it frustrating to spend hours searching for the perfect template,assets, resources and services ? Look no further than Envato Elements!

Envato Elements is a one-stop-shop for high-quality templates for everything from WordPress websites to PowerPoint presentations, graphics, and more. With thousands of professionally-designed templates to choose from, Envato Elements makes it easy to find exactly what you need to take your online presence to the next level.

But don't just take my word for it - check out my latest blog post where I go into more detail about the benefits of Envato Elements and how it can help take your online presence to the next level.

https://www.vimscon.com/2023/04/why-envato-elements-is-game-changer-for.html

Don't miss out on this opportunity to supercharge your business. Visit our blog article now and discover the power of Envato Elements.


Best regards,

[Business Hack]