Ubuntu
curl package

libcurl3 causes https file upload to fail in flash player 10

Bug #389958 reported by Luis Arias
22
This bug affects 4 people
Affects Status Importance Assigned to Milestone
adobe-flashplugin (Ubuntu)
New
Undecided
Unassigned
curl (Ubuntu)
Incomplete
Low
Unassigned

Bug Description

Contrary to reports mentioned in this post on Adobe's jira:

(See http://www.pavlasek.sk/devel/?p=10)

Flash Player 10 will successfully upload using Flex's FileReference.upload method on http and https on firefox in a clean jaunty installation. I recently came across a systematic failure of this method on https on my personal jaunty installation and tracked it down to having installed curl (and thus dependent package libcurl3).

If libcurl3 is installed on top of a clean jaunty installation file upload will fail on https. The reason seems to have something to do with invalid handling of TLSV1 with libcurl3 installed since I saw an error in wireshark with a TLS frame being returned stating "Fatal, Unexpected Message". I suspect a difference in implementation between OpenSSL and / Gnu TLS. Flash player in firefox / linux makes its own http or https connections instead of going through the browser when doing file upload.

Revision history for this message
Brian Murray (brian-murray) wrote :

Thanks for taking the time to report this bug and helping to make Ubuntu better. Could you please provide a web site that uses this functionality so others can test this bug? Thanks in advance.

Changed in curl (Ubuntu):
importance: Undecided → Low
status: New → Incomplete
Revision history for this message
Luis Arias (kaaloo) wrote :

Hi, it may be hard to find a public site that uploads with ssl. I personally noticed the problem on our mybalsamiq.com site which is ssl only but is currently in private beta. I can send an invite to a project to you on the site where you can try an upload with libcurl installed and not installed and you can see the difference. Please let me know if that can help.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.