[EXTERNAL] - Help: Authorization information along with application data

[Michael Wojcik]

> From: openssl-users <openssl-users-bounces at openssl.org> On Behalf Of Jason Qian via openssl-users
> Sent: Thursday, 28 March, 2024 07:54

> All clients work fine, but when using C++ client, the server receives a large amount of
> Authorization information along with application data.

> GET /data//somehost-1/ddt//ds-1117482431063112572/2.out HTTP/1.1
> Host:  ...
> Authorization: Negotiate YIIMmQYGKwYBBQUCoIIMjTCCDImgMDAuBgkqhkiC9xIBAg......

That's not "a large amount of Authorization information". It's a standard HTTP Authorization header. See RFC9110 11.6.2.

> The C++ client is using  CURL [7.83.0] with OpenSSL 1.1.1n.

This has nothing to do with OpenSSL. OpenSSL does not generate HTTP messages. Curl does. Your problem is with your client and how you're using curl. Consult the curl documentation and/or a curl forum.

-- 
Michael Wojcik