Page MenuHomePhabricator

API requests fail on SSL
Closed, InvalidPublic

Description

SSL POSTs to /w/api.php are getting "400 Bad Request".

Sample POST: http://paste2.org/p/1721585
Result: http://paste2.org/p/1721603

Note that I've since changed my password.


Version: unspecified
Severity: normal

Details

Reference
bz31756

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 11:51 PM
bzimport added a project: HTTPS.
bzimport set Reference to bz31756.

Seems this is only a problem with HTTP/1.1 requests. HTTP/1.0 requests work properly. I can't figure out why. I'll investigate this more.

Actually, I take this back. I tested this, and it's all working for me.

I just tested logging in to https://en.wikipedia.org/ via the API (https://en.wikipedia.org/w/api.php) and it seems to be working fine for me. Are there (still) steps to reproduce a failure? Otherwise, I'm inclined to mark this bug resolved as "fixed" or "worksforme."

I wonder if this could be caused by how my client is doing SSL using gnutls-cli. I'll try with openssl.

Yep, openssl works. I'll have to check gnutls-cli.