authneg: add Content-Length:0 while negotiating auth

[iboukris]

Even if the user supplied custom content-length header it
should be set to 0 for both HTTPREQ_POST and HTTPREQ_PUT flows.
This is what we do already in HTTPREQ_POST_FORM and what we
did in the HTTPREQ_POST case prior to commit:
afd288b

Otherwise, if the user set custom header we'd end up skipping
the content-length header altogether.

Signed-off-by: Isaac Boukris iboukris@gmail.com
Reported-by: Hölzl, Dominik Dominik.Hoelzl@fabasoft.com

[iboukris]

Hi, here is a small reproducer based on Dominik's example on mailing-list (notice CL missing).

#include <curl/curl.h>

int main(int argc, char *argv[])
{
  CURLcode ret;
  CURL *hnd;

  hnd = curl_easy_init();
  curl_easy_setopt(hnd, CURLOPT_URL, "http://localhost/");
  curl_easy_setopt(hnd, CURLOPT_USERPWD, "x:y");
  curl_easy_setopt(hnd, CURLOPT_HTTPAUTH, CURLAUTH_NTLM);
  curl_easy_setopt(hnd, CURLOPT_VERBOSE, 1L);

  curl_easy_setopt(hnd, CURLOPT_POSTFIELDS, "a=b");

  struct curl_slist *headers = NULL;
  headers = curl_slist_append(headers, "Content-Length: 3");
  curl_easy_setopt(hnd, CURLOPT_HTTPHEADER, headers);

  ret = curl_easy_perform(hnd);

  curl_easy_cleanup(hnd);

  return ret;
}

[jay]

Thanks Isaac I landed this with some tests and a modified commit message.

[iboukris]

Great, thank you all!

[dhoelzl]

Thank you for the quick response and fixing the problem!