[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#600662: konqueror: passes literal ipv6 address to HTTP CONNECT proxy



Package: konqueror
Version: 4:4.4.5-1
Severity: normal
Tags: ipv6

Hi,
When I try to browse https://www.sixxs.net/ in Konqueror, it issues the
following HTTP CONNECT call to my local http proxy[1]:

| CONNECT 2001:1AF8:1:F006:0:0:0:6:443 HTTP/1.1
| Proxy-Connection: keep-alive
| User-Agent: Mozilla/5.0
| Host: 2001:1AF8:1:F006:0:0:0:6

This fails with

| HTTP/1.1 504 Host 2001:1af8:1:f006:0:0:0:6 lookup failed: Host not found

and Konqueror falls back to IPv4. RFC 2817 says
| The Request-URI portion of the Request-Line is always
| an 'authority' as defined by URI Generic Syntax [RFC 2396]
which I read to mean "IPv6 literals have to be enlosed in square
brackets", and indeed, a telnet session shows polipo honoring the
following:

| CONNECT [2001:1AF8:1:F006:0:0:0:6]:443  HTTP/1.1

However, the IMHO proper solution, which is also what elinks, arora and
iceweasel do, is to pass the hostname on and let the proxy do the
name resolution:

| CONNECT www.sixxs.net:443  HTTP/1.1

This does not only give the proxy more leeway to do its job, it also
prevents DNS information leaks e.g. when using TOR, and it will likely
fix the broken Host: header automatically on the way.

I realize this may not be konqueror's own fault, but of one of its
libraries, please reassign accordingly if so.

regards,
    Jan
[1]
Polipo. Konfigured in konqueror via the environment variables.
And yes, I've messed with konqueror's UA string.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (99, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages konqueror depends on:
ii  install-info              4.13a.dfsg.1-5 Manage installed documentation in 
ii  kdebase-bin               4:4.4.5-1      core binaries for the KDE base app
ii  kdebase-data              4:4.4.5-1      shared data files for the KDE base
ii  kdebase-runtime           4:4.4.5-1      runtime components from the offici
ii  libc6                     2.11.2-6       Embedded GNU C Library: Shared lib
ii  libkde3support4           4:4.4.5-1      the KDE 3 Support Library for the 
ii  libkdecore5               4:4.4.5-1      the KDE Platform Core Library
ii  libkdesu5                 4:4.4.5-1      the Console-mode Authentication Li
ii  libkdeui5                 4:4.4.5-1      the KDE Platform User Interface Li
ii  libkhtml5                 4:4.4.5-1      the KHTML Web Content Rendering En
ii  libkio5                   4:4.4.5-1      the Network-enabled File Managemen
ii  libkonq5                  4:4.4.5-1      core libraries for Konqueror
ii  libkonqsidebarplugin4a    4:4.4.5-1      konqueror sidebar plugin library
ii  libkparts4                4:4.4.5-1      the Framework for the KDE Platform
ii  libkutils4                4:4.4.5-1      various utility classes for the KD
ii  libqt4-dbus               4:4.6.3-1+b1   Qt 4 D-Bus module
ii  libqt4-qt3support         4:4.6.3-1+b1   Qt 3 compatibility library for Qt 
ii  libqt4-xml                4:4.6.3-1+b1   Qt 4 XML module
ii  libqtcore4                4:4.6.3-1+b1   Qt 4 core module
ii  libqtgui4                 4:4.6.3-1+b1   Qt 4 GUI module
ii  libstdc++6                4.4.5-2        The GNU Standard C++ Library v3
ii  libx11-6                  2:1.3.3-3      X11 client-side library

Versions of packages konqueror recommends:
pn  dolphin                       <none>     (no description available)
pn  konqueror-nsplugins           <none>     (no description available)

Versions of packages konqueror suggests:
pn  konq-plugins                  <none>     (no description available)

-- debconf-show failed

-- 
()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments

Attachment: signature.asc
Description: Digital signature


Reply to: