webui login failure on Firefox 10+ and Opera 11+

Bug #941343 reported by Vladimir Lalov
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
qBittorrent
Fix Released
Medium
Christophe Dumez

Bug Description

Accessing the Webui with either Firefox 10+ or Opera 11+ yields the following text:

HTTP/1.1 401 Unauthorized
WWW-Authenticate: Digest realm="Web UI Access", nonce="{stripped}", opaque="{stripped}", stale="false", algorithm="MD5", qop="auth"

The user is not able to login, nor the UI is shown.

Revision history for this message
Christophe Dumez (hydr0g3n) wrote :

What's the OS on which qBittorrent is running?
What's the OS on which your browser is running?

Changed in qbittorrent:
status: New → Incomplete
assignee: nobody → Christophe Dumez (hydr0g3n)
Revision history for this message
Christophe Dumez (hydr0g3n) wrote :

I'm unable to reproduce with qBittorrent v2.9.5 and Firefox 10.0.2, both running on Mac OS X.

Revision history for this message
Vladimir Lalov (v-lalov) wrote :

qBittorrent 2.9.3+ (tried 2.9.5 as well)
OS: Windows 7 Enterprise x86_64 (no SP1)
Firefox: 10.0.x

qBittorrent was built from source on OpenSuSE 12.1 x86_64 with --disable-gui option and has SSL enabled.

Here's more details:

Request:
GET {skipped}:8080
Accept text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding gzip, deflate
Accept-Language en-gb,en;q=0.5
Connection keep-alive
Cookie filters_width=120; properties_height=274
Host {skipped}:8080
User-Agent Mozilla/5.0 (Windows NT 6.1; WOW64; rv:10.0.2) Gecko/20100101 Firefox/10.0.2

Response:
400 Bad Request

(as text shown in the browser)
HTTP/1.1 401 Unauthorized
WWW-Authenticate: Digest realm="Web UI Access", nonce="{stripped}", opaque="{stripped}", stale="false", algorithm="MD5", qop="auth"

The same worked okay with Firefox 9.0.x

Revision history for this message
Vladimir Lalov (v-lalov) wrote :

qBittorrent is running on the same machine it was built on - OpenSuSE 12.1 x64
I've tried reverting to Firefox 9.0 and there was no problem.
I'm seeing the same HTTP 400 error with IE 9.0.4 too.

If I can help with something else, let me know!

Thanks.

Vladimir Lalov (v-lalov)
Changed in qbittorrent:
status: Incomplete → Opinion
Revision history for this message
leigh123linux (leigh123linux-deactivatedaccount) wrote :

I have no issue accessing qbittorrent 2.9.5 running on F16 using firefox 10.0.2 on Windows7.

Revision history for this message
Christophe Dumez (hydr0g3n) wrote :

I tried Firefox 11 on Windows accessing a qBittorrent on Linux. Works for me...

Revision history for this message
Vladimir Lalov (v-lalov) wrote :

Hi guys,
I've done some more research on this. It turns out I see this issue only with SSL enabled (on Win - IE9, Opera 11, FF 10+, on Linux - FF 10+). If I disable the SSL, all is well - just like with your tests. I saw the qbittorrent does support secure renegotiation, so it shouldn't be that. Maybe they can't agree on a cypher or something?

Changed in qbittorrent:
status: Opinion → New
importance: Undecided → Medium
status: New → Triaged
milestone: none → 2.9.6
Changed in qbittorrent:
status: Triaged → In Progress
Revision history for this message
Christophe Dumez (hydr0g3n) wrote :

Fixed for v2.9.6. Thanks for the bug report, this was a tricky one :)

Changed in qbittorrent:
status: In Progress → Fix Committed
Revision history for this message
Vladimir Lalov (v-lalov) wrote :

So it's the BEAST fixes in the browsers. :)
Good job. Thanks for your support.

Changed in qbittorrent:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.