Marc, Thanks very much for addressing this problem. Any help you can provide figuring out why I'm seeing these extra sets of headers in the EBay http response would be greatly appreciated. Doesn't make sense to me either. If you can't figure this out...if you find the time to try the HTTP GET request with URL http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn8 and let me know if I'm somehow misinterpreting what I see, I'd still very much appreciate your help.
Rick --- [EMAIL PROTECTED] wrote: > I just commited the fix for 8287. We'll accept > 'secure' cookies over an > unsecure channel. RFC 2109 seems to allow this as a > valid thing. It also > seems to allow us (the client) some flexibility in > how we deal with 'secure' > cookies. So, at least for now, we'll continue to > only *send* them out in > Cookie headers on secure connections. This also > seems to be the behavior of > IIS. > > I have no idea, right now, what the hell EBay is > doing sending multiple 200 > OK responses to the GET request. I'll investigate > this a little further and > let you know what I come up with. > > > Marc Saegesser > > > -----Original Message----- > > From: Rick Horowitz [mailto:[EMAIL PROTECTED]] > > Sent: Tuesday, April 23, 2002 12:42 PM > > To: [EMAIL PROTECTED] > > Subject: HttpClient HTTP response problem > > > > > > I'm using HttpClient obtained from CVS a few days > ago. > > I'm trying to get the EBay login page, which I > can > > GET from my browser via URL: > > > > > http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn8 > > > > With HTTPClient, I'm using: > > > > GetMethod method = > > new > > > GetMethod("/aw-cgi/eBayISAPI.dll?SignIn"); > > method.setQueryString("SignIn"); > > > > I'm able to correctly receive the HTTP response > body, > > but am having a problem with the HTTP headers in > the > > response, as follows: > > > > 1. EBay sends several cookies, 2 of which contain > the > > "secure" parameter. This causes an exception in > > HttpClient because this is not an SSL connection, > > causing all cookies to be rejected by HttpClient. > I > > voted for bug 8287, which I believe addresses this > > problem, but no fix as yet, if I'm not mistaken. > > > > 2. In HttpMethodBase.readResponseHeaders(), the > > following confusing (at least to me) series of > HTTP > > headers is read by HttpClient when receiving the > HTTP > > response message: > > > > Server: Microsoft-IIS/4.0 > > Date: Tue, 23 Apr 2002 15:42:50 GMT > > Connection: close > > Set-Cookie: > > > s=AAAEAAAASAAAARQAAAPqAxTx6u848QDY1LjkxLjIyMS4xMmUxdGVzdENvb2t > > > pZSAkMiRKYWthcnRhICRzbllBam9OL3RyN2JLbk9jSW9jcUEuAA**l; > > path=/; domain=.ebay.com > > Set-Cookie: secure_ticket=n; path=/; > domain=.ebay.com; > > secure > > Set-Cookie: secure_ticket_l2=n; path=/; > > domain=.ebay.com; secure > > HTTP/1.1 200 OK > > Server: Microsoft-IIS/4.0 > > Date: Tue, 23 Apr 2002 15:42:50 GMT > > Connection: close > > Set-Cookie: > > > s=AAAEAAAASAAAARQAAAPqAxTx6u848QDY1LjkxLjIyMS4xMmUxdGVzdENvb2t > > > pZSAkMiRKYWthcnRhICRzbllBam9OL3RyN2JLbk9jSW9jcUEuAA**l; > > path=/; domain=.ebay.com > > HTTP/1.1 200 OK > > Server: Microsoft-IIS/4.0 > > Date: Tue, 23 Apr 2002 15:42:50 GMT > > Connection: close > > > > Note: the status line is sent by EBay 3 times (the > > first one doesn't appear in this list because it > is > > processed previously by readStatusLine()). Also, > > related, is that the headers are repeated after > the > > status line is resent. Anyone know what's going on > > here? > > > > I modified the HttpClient code locally to ignore > the > > additional status lines - clearly there's a > problem > > here, but I don't know enough about HTTP to figure > it > > out. > > > > Thanks very much in advance for any help. BTW, I > like > > the product very much in general, although a short > > HOW-TO would be useful. Kudos to the authors, and > my > > thanks for your efforts. > > > > Rick > > > > > > > > > > __________________________________________________ > > Do You Yahoo!? > > Yahoo! Games - play chess, backgammon, pool and > more > > http://games.yahoo.com/ > > > > -- > > To unsubscribe, e-mail: > > > <mailto:[EMAIL PROTECTED]> > > For additional commands, e-mail: > > <mailto:[EMAIL PROTECTED]> > > > > -- > To unsubscribe, e-mail: > <mailto:[EMAIL PROTECTED]> > For additional commands, e-mail: > <mailto:[EMAIL PROTECTED]> > __________________________________________________ Do You Yahoo!? Yahoo! Games - play chess, backgammon, pool and more http://games.yahoo.com/ -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
