226362 - A https request (ssl) using post will not transport form data so the client gets a timeout

Status: RESOLVED WORKSFORME

(SeaMonkey :: General, defect)

Description

[Torsten Dargers]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3) Gecko/20030312
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.3) Gecko/20030312

Using phprojekt login screen a form is being send to the webserver using post.
This works perfectly well using http://... but does not work using https://...

It seems that the body containing the form is just not send as the last line of
the http request header ends with 0D0A but should continue with another 0D0A and
then the body should appear.

As the site is in our intranet I cannot provide a URL that would be accessible
from the outside world. Instead I can provide a hexdump of the raw request as
seen by the webserver. It is a bit wide but maybe the best way of transporting
those information.




File: raw_requ~163.log  Offset 0x00000000  630 bytes   [grow]                  
                                                          100%
00000000 50 4F 53 54 x 20 2F 70 68 x 70 72 6F 6A x 65 6B 74 2F x 69 6E 64 65 x
78 2E 70 68 x 70 20 48 54         POST /phprojekt/index.php HT 
0000001C 54 50 2F 31 x 2E 31 0D 0A x 48 6F 73 74 x 3A 20 6E 6F x 72 74 68 62 x
72 69 64 67 x 65 0D 0A 55         TP/1.1..Host: northbridge..U 
00000038 73 65 72 2D x 41 67 65 6E x 74 3A 20 4D x 6F 7A 69 6C x 6C 61 2F 35 x
2E 30 20 28 x 57 69 6E 64         ser-Agent: Mozilla/5.0 (Wind 
00000054 6F 77 73 3B x 20 55 3B 20 x 57 69 6E 64 x 6F 77 73 20 x 4E 54 20 35 x
2E 30 3B 20 x 65 6E 2D 55         ows; U; Windows NT 5.0; en-U 
00000070 53 3B 20 72 x 76 3A 31 2E x 33 29 20 47 x 65 63 6B 6F x 2F 32 30 30 x
33 30 33 31 x 32 0D 0A 41         S; rv:1.3) Gecko/20030312..A 
0000008C 63 63 65 70 x 74 3A 20 61 x 70 70 6C 69 x 63 61 74 69 x 6F 6E 2F 78 x
2D 73 68 6F x 63 6B 77 61         ccept: application/x-shockwa 
000000A8 76 65 2D 66 x 6C 61 73 68 x 2C 74 65 78 x 74 2F 78 6D x 6C 2C 61 70 x
70 6C 69 63 x 61 74 69 6F         ve-flash,text/xml,applicatio 
000000C4 6E 2F 78 6D x 6C 2C 61 70 x 70 6C 69 63 x 61 74 69 6F x 6E 2F 78 68 x
74 6D 6C 2B x 78 6D 6C 2C         n/xml,application/xhtml+xml, 
000000E0 74 65 78 74 x 2F 68 74 6D x 6C 3B 71 3D x 30 2E 39 2C x 74 65 78 74 x
2F 70 6C 61 x 69 6E 3B 71         text/html;q=0.9,text/plain;q 
000000FC 3D 30 2E 38 x 2C 76 69 64 x 65 6F 2F 78 x 2D 6D 6E 67 x 2C 69 6D 61 x
67 65 2F 70 x 6E 67 2C 69         =0.8,video/x-mng,image/png,i 
00000118 6D 61 67 65 x 2F 6A 70 65 x 67 2C 69 6D x 61 67 65 2F x 67 69 66 3B x
71 3D 30 2E x 32 2C 2A 2F         mage/jpeg,image/gif;q=0.2,*/ 
00000134 2A 3B 71 3D x 30 2E 31 0D x 0A 41 63 63 x 65 70 74 2D x 4C 61 6E 67 x
75 61 67 65 x 3A 20 65 6E         *;q=0.1..Accept-Language: en 
00000150 2D 75 73 2C x 65 6E 3B 71 x 3D 30 2E 35 x 0D 0A 41 63 x 63 65 70 74 x
2D 45 6E 63 x 6F 64 69 6E         -us,en;q=0.5..Accept-Encodin 
0000016C 67 3A 20 67 x 7A 69 70 2C x 64 65 66 6C x 61 74 65 2C x 63 6F 6D 70 x
72 65 73 73 x 3B 71 3D 30         g: gzip,deflate,compress;q=0 
00000188 2E 39 0D 0A x 41 63 63 65 x 70 74 2D 43 x 68 61 72 73 x 65 74 3A 20 x
49 53 4F 2D x 38 38 35 39         .9..Accept-Charset: ISO-8859 
000001A4 2D 31 2C 75 x 74 66 2D 38 x 3B 71 3D 30 x 2E 37 2C 2A x 3B 71 3D 30 x
2E 37 0D 0A x 4B 65 65 70         -1,utf-8;q=0.7,*;q=0.7..Keep 
000001C0 2D 41 6C 69 x 76 65 3A 20 x 33 30 30 0D x 0A 43 6F 6E x 6E 65 63 74 x
69 6F 6E 3A x 20 6B 65 65         -Alive: 300..Connection: kee 
000001DC 70 2D 61 6C x 69 76 65 0D x 0A 41 75 74 x 68 6F 72 69 x 7A 61 74 69 x
6F 6E 3A 20 x 42 61 73 69         p-alive..Authorization: Basi 
000001F8 63 20 64 47 x 52 68 4F 6D x 31 68 53 57 x 34 6B 63 32 x 74 4A 62 47 x
77 3D 0D 0A x 52 65 66 65         c dGRhOm1hSW4kc2tJbGw=..Refe 
00000214 72 65 72 3A x 20 68 74 74 x 70 73 3A 2F x 2F 6E 6F 72 x 74 68 62 72 x
69 64 67 65 x 2F 70 68 70         rer: https://northbridge/php 
00000230 72 6F 6A 65 x 6B 74 2F 69 x 6E 64 65 78 x 2E 70 68 70 x 0D 0A 43 6F x
6F 6B 69 65 x 3A 20 50 48         rojekt/index.php..Cookie: PH 
0000024C 50 53 45 53 x 53 49 44 3D x 63 32 34 33 x 30 61 37 65 x 63 35 39 33 x
35 34 39 33 x 61 38 31 39         PSESSID=c2430a7ec5935493a819 
00000268 33 66 62 66 x 31 36 34 36 x 31 36 34 62 x 0D 0A                       
                                 3fbf1646164b..               
                                                                               
                      -----------------------------------------
The form (part):

<form action='index.php' method='post' name='frm' onSubmit="return
chkForm('frm','loginstring','Please fill in the following field: Last
name','user_pw','Please fill in the following field: Password')">
<input type='hidden' name'loginform' value='1'>
...
</form>



Reproducible: Always

Steps to Reproduce:
1. Recall the https://... url
2.
3.

Actual Results:  
Timeout at the webserver.

Expected Results:  
Continue the request header with a line of its own (0x0D0A) and send the form
data as request body.

Thanks guys (and girls). The Mozilla project is one of the best community
projects on this planet.

Comment 1

[Boris Zbarsky [:bzbarsky]]

HTTPS posts work fine over here (just tested on several sites).  Are you seeing
this with a more recent build than 1.3?  If so, some more details about how this
site differs from other https sites would be in order....

Comment 2

[Carsten Book [:Tomcat]]

WFM Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8b2) Gecko/20050409

+No response from the reporter for more than 3 months.  I am going to mark this
WFM, if a testcase, url, etc comes in, feel free to re-open.