Slash Boxes
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

gav (2710)

  (email not shown publicly)
AOL IM: flufflegavin (Add Buddy, Send Message)

Hacker in NYC.

Journal of gav (2710)

Wednesday October 15, 2003
10:43 PM

HTTP woes

[ #15235 ]

It seems that neither LWP or Curl want to talk to Capital One's online service. They claim:

  • You are using Netscape 4.0 through 4.07, which we cannot support for online account transactions due to security reasons.
  • You are using a browser that is incompatible with our Online Account Services system. We suggest Netscape version 4.08 or higher or Internet Explorer version 4.0 or higher. For Macintosh users, we suggest Internet Explorer version 4.5 or higher.
  • Your browser does not support 128-bit encryption.

I'm spoofing an IE 6 user agent string, so I'm guessing it's the 128-bit issue. Comparing the differences in %ENV between IE and LWP the only thing that stands out is that for LWP it sets SSL_CIPHER_ALGKEYSIZE=168, SSL_PROTOCOL=TLSv1, and SSL_CIPHER=EDH-RSA-DES-CBC3-SHA; IE sends SSL_CIPHER_ALGKEYSIZE=128, SSL_PROTOCOL=SSLv3, and SSL_CIPHER=RC4-MD5.

Does anyone know how to work around this?

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
More | Login | Reply
Loading... please wait.