July 2015 - Macnetworkprog - lists.apple.com

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by Jens Alfke 15 Jul '15

15 Jul '15

_______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by Quinn "The Eskimo!" 15 Jul '15

15 Jul '15

On 14 Jul 2015, at 00:11, dangerwillrobinsondanger(a)gmail.com wrote: > In an ideal world Apple would have a public WebSocket client and server API... Indeed. While I've seen this request before many times, but I still encourage you to file your enhancement request for this stuff. <https://developer.apple.com/bug-reporting/> Please post your bug number, just for the record. One thing to note is that the current beta OSes have NSURLSessionStreamTask, and you can convert a data task into a stream task via the NSURLSessionResponseBecomeStream (and from there capture the streams from the stream task to get an NS{Input,Output}Stream pair). I /think/ that allows you to implement WebSockets very easily, although I must admit that I haven't tested this stuff myself yet. Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by Quinn "The Eskimo!" 15 Jul '15

15 Jul '15

On 14 Jul 2015, at 18:40, Jens Alfke <jens(a)mooseyard.com> wrote: > ... it’s not possible to support HTTP digest auth in a WebSocket client (without implementing all of RFC2617 by hand), because one setter function in CFHTTPMessage’s API hasn’t been made public. Correct. [Well, we probably wouldn't make that exact routine public, but the functionality of that routine needs to be made public, yes.] On the plus side, implementing Digest is pretty simple; think yourself lucky you're not implementing NTLM (-: > And previous Radars about this, filed as long ago as 2007, have been rejected as “behaves correctly”. AFAIK the bug for this is still active but I will check to make sure. > Is there any use in me filing yet another Radar? Absolutely. Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by Jens Alfke 14 Jul '15

14 Jul '15

> On Jul 14, 2015, at 1:29 AM, Quinn The Eskimo! <eskimo1(a)apple.com> wrote: > > Alas, this is not helpful when implementing a WebSocket. Sigh! OK, so at this point the story is that it’s not possible to support HTTP digest auth in a WebSocket client (without implementing all of RFC2617 by hand), because one setter function in CFHTTPMessage’s API hasn’t been made public. And previous Radars about this, filed as long ago as 2007, have been rejected as “behaves correctly”. Is there any use in me filing yet another Radar? I’m not happy using Basic auth and exposing users’ passwords when communicating with servers that haven’t yet been able to deploy SSL. :/ (Grumpiness not meant personally of course.) —Jens _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by Quinn "The Eskimo!" 14 Jul '15

14 Jul '15

On 13 Jul 2015, at 23:20, Jens Alfke <jens(a)mooseyard.com> wrote: > Does CFHTTPStream just go into passthru mode at that point? On the read side, yes. The problem is the write side. Remember that, when you want to stream data to a CFHTTPStream, you give it a read stream and it reads data from that stream and writes it to TCP connection. The issue is that it applies chunked transfer encoding to the data, as you'd expect for an HTTP request body of unknown length. Alas, this is not helpful when implementing a WebSocket. Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: : NSError code 65 coming from NSStream
by Jens Alfke 14 Jul '15

14 Jul '15

_______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

: NSError code 65 coming from NSStream
by Peter C 14 Jul '15

14 Jul '15

TCP/IP Error 65 : Could not complete the operation. No route to host What does this error code & message means ? -- Using Opera's mail client: http://www.opera.com/mail/ _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com I received a complain from customer about an error occurs and is coming from NSStream. Basically the Cocoa code is written using NSStream. It is rather simple, the Mac connects to the printer and send raw printer data direct to printer either by Bonjour or a fixed IP. Somehow for this customer encounter the problem during sending data to printer an error occurs. The mac needs to reboot to resend again. There are many other customers' sites that are using the same software I developed but does not encounter the same problem. Below NSStreamEventErrorOccurred event returns a NSError with the following in Japanese. I can't read Japanese, so here is the google translate in English, TCP/IP Error 65 : 操作を完了できませんでした。ホストへのルートがありません I tried looking up for the NSError code 65 but can't find it in the listing.

1 0

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by dangerwillrobinsondanger＠gmail.com 13 Jul '15

13 Jul '15

In an ideal world Apple would have a public WebSocket client and server API... Sent from my iPhone > On Jul 14, 2015, at 7:20 AM, Jens Alfke <jens(a)mooseyard.com> wrote: > > >> On Jul 13, 2015, at 1:31 AM, Quinn The Eskimo! <eskimo1(a)apple.com> wrote: >> >> >>> On 1 Jul 2015, at 06:03, Jens Alfke <jens(a)mooseyard.com> wrote: >>> >>> I’ve run into a problem with CFHTTPMessageAddAuthentication: it works fine with HTTP Basic auth challenges, but when I try to use it with a Digest auth challenge it fails (returns false.) >> >> Where did you get the CFHTTPMessage from? > > It’s from the PocketSocket library (a WebSocket implementation), which is creating it itself, not getting it from a CFHTTPStream. > > Conceivably I could refactor PSWebSocket to use CFHTTPStream instead of doing its own HTTP response parsing, but the way the code is written makes that difficult, since they put the networking code and the parsing code in two different classes for abstraction purposes. > > Actually I’m not even certain if CFHTTPStream can be used to open a WebSocket, since the protocol stops being HTTP as soon as the server sends the response headers. Does CFHTTPStream just go into passthru mode at that point? > >> The following post, and its associated thread, has more details. >> <http://lists.apple.com/archives/macnetworkprog/2013/Dec/msg00004.html> > > Hm, this is a mess isn’t it. It’s another case of an Apple network-related class that looks like it should be generically useable, but turns out not to be fully instantiable using public APIs. (NSHTTPURLResponse used to be that way before 10.7.2, which was a PITA for anyone implementing an HTTP-like NSURLProtocol.) > > It’s pretty common in the wild to write code that parses HTTP responses from a socket; I’ve seen a lot of open-source code that does it using CFHTTPMessage, and I’ve done it myself many times. > > Sadly I can’t use the private API workaround because my code has to run on iOS. > > BTW, in that thread you responded: > >>> Currently, I’m working on an application which needs to act as server and client role in the same time [...] >> >> Wow, that's really messed up. > > I hope you were being tongue-in-cheek ― what the OP is describing is simply what any P2P app does. > > ―Jens > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > https://lists.apple.com/mailman/options/macnetworkprog/dangerwillrobinsonda… > > This email sent to dangerwillrobinsondanger(a)gmail.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by Jens Alfke 13 Jul '15

13 Jul '15

> On Jul 13, 2015, at 1:31 AM, Quinn The Eskimo! <eskimo1(a)apple.com> wrote: > > > On 1 Jul 2015, at 06:03, Jens Alfke <jens(a)mooseyard.com> wrote: > >> I’ve run into a problem with CFHTTPMessageAddAuthentication: it works fine with HTTP Basic auth challenges, but when I try to use it with a Digest auth challenge it fails (returns false.) > > Where did you get the CFHTTPMessage from? It’s from the PocketSocket library (a WebSocket implementation), which is creating it itself, not getting it from a CFHTTPStream. Conceivably I could refactor PSWebSocket to use CFHTTPStream instead of doing its own HTTP response parsing, but the way the code is written makes that difficult, since they put the networking code and the parsing code in two different classes for abstraction purposes. Actually I’m not even certain if CFHTTPStream can be used to open a WebSocket, since the protocol stops being HTTP as soon as the server sends the response headers. Does CFHTTPStream just go into passthru mode at that point? > The following post, and its associated thread, has more details. > <http://lists.apple.com/archives/macnetworkprog/2013/Dec/msg00004.html> Hm, this is a mess isn’t it. It’s another case of an Apple network-related class that looks like it should be generically useable, but turns out not to be fully instantiable using public APIs. (NSHTTPURLResponse used to be that way before 10.7.2, which was a PITA for anyone implementing an HTTP-like NSURLProtocol.) It’s pretty common in the wild to write code that parses HTTP responses from a socket; I’ve seen a lot of open-source code that does it using CFHTTPMessage, and I’ve done it myself many times. Sadly I can’t use the private API workaround because my code has to run on iOS. BTW, in that thread you responded: >> Currently, I’m working on an application which needs to act as server and client role in the same time [...] > > Wow, that's really messed up. I hope you were being tongue-in-cheek — what the OP is describing is simply what any P2P app does. —Jens _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Does CFHTTPMessageAddAuthentication support digest auth?
by Quinn "The Eskimo!" 13 Jul '15

13 Jul '15

On 1 Jul 2015, at 06:03, Jens Alfke <jens(a)mooseyard.com> wrote: > I’ve run into a problem with CFHTTPMessageAddAuthentication: it works fine with HTTP Basic auth challenges, but when I try to use it with a Digest auth challenge it fails (returns false.) Where did you get the CFHTTPMessage from? If you got it from CFHTTPStream, Digest should work. If you got it from elsewhere--specifically, if you created it yourself using CFHTTPMessageCreateResponse or CFHTTPMessageCreateEmpty--you will run into problems because Digest needs to know the URL associated with the response and there's no public API for you to provide it. The following post, and its associated thread, has more details. <http://lists.apple.com/archives/macnetworkprog/2013/Dec/msg00004.html> Share and Enjoy -- Quinn "The Eskimo!" <http://www.apple.com/developer/> Apple Developer Relations, Developer Technical Support, Core OS/Hardware _______________________________________________ Do not post admin requests to the list. They will be ignored. Macnetworkprog mailing list (Macnetworkprog(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/macnetworkprog/site_archiver%40list… This email sent to site_archiver(a)lists.apple.com

1 0