Skip to content

Conversation

@edaniels
Copy link
Contributor

@edaniels edaniels commented Oct 5, 2025

As of v1.57.2, calling ~/go/bin/buf curl -vvvvvv --debug --http2-prior-knowledge --protocol grpc http://127.0.0.1:55555 --list-methods would result in the TLS handshake hanging. After bisecting down to v1.57.1 being the first bad tag, I found the regression here 2d0ab7a#diff-05c240e5d4191f595d5b747c112c314cf14ee4d77505cee99aac9500eed39527L1135-R1144. I think there are lacking test cases for the buf curl command (unless you have some other acceptance test suite internally), so this was an easy miss. With this, we should be back to insecurely calling gRPC server methods 8).

@edaniels edaniels changed the title curl: only set HTTP1 when HTTP/2 Prior Knowledge and HTTP/3 flags arefalse curl: only set HTTP1 when HTTP/2 Prior Knowledge and HTTP/3 flags are false Oct 5, 2025
@CLAassistant
Copy link

CLAassistant commented Oct 5, 2025

CLA assistant check
All committers have signed the CLA.

@edaniels
Copy link
Contributor Author

edaniels commented Oct 5, 2025

@emcfarlane tagging you on this since you'll probably have the most context. Thanks!

@s4lmon
Copy link

s4lmon commented Oct 6, 2025

LGTM @edaniels

Copy link
Member

@doriable doriable left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for putting up the fix, left a comment with a suggested change!

@edaniels edaniels requested a review from doriable October 7, 2025 22:22
@doriable doriable changed the title curl: only set HTTP1 when HTTP/2 Prior Knowledge and HTTP/3 flags are false Only set HTTP1 when HTTP/2 Prior Knowledge flag is false in buf curl Oct 7, 2025
@doriable
Copy link
Member

doriable commented Oct 7, 2025

This looks reasonable to me, before approving, I'm going to let @emcfarlane a chance to go over this as well.

Copy link
Member

@doriable doriable left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approving and merging, thank you!

@doriable doriable merged commit 2358ba2 into bufbuild:main Oct 8, 2025
9 of 10 checks passed
@edaniels edaniels deleted the fix-http2-pk branch October 8, 2025 19:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants