Curl digest auth broken

Installing and Using OpenWrt
1

Hi,

I'm on Xiaomi ax3600 using Openwrt snapshots. One of my cron scripts uses curl digest auth. This no longer sends the correct authorization flow (checked via -vv).

Last worked on: r28926-openwrt-6397057851a8-qualcommax-ipq807x-xiaomi_ax3600-squashfs-sysupgrade.bin

Short after that build number it broke. I rolled back to r28926 and it worked again. Tried the recent build nr as they appeared - broken again.

Is there some apk dependency missing or sth wrong with the curl package itself?

Thanks.

DDNS fail to update with CURL installed
Dynalink DL-WRX36 SNAPSHOT - curl not working
2

I have a similar curl issue, curl 8.10.1 works, curl 8.12.1 doesn't.

1 Like
3

I suspect its not the curl version itself to blame, because my same script works on debian linux with the same curl version.

4

I tend to agree it's not the curl version at play.

I just installed Kali Linux Rolling (Windows Subsystem for Linux) distribution on my windows PC.

This WSL distribution has the same curl version as the current snapshot version 8.12.1-2 and it works fine.

1 Like
5

Should we just wait until curl updates again?

6

As suggested, rebuild the package by reverting its make file and build it from scratch or wait for the next version?

7

What commands are required to run on my debian box to build a working version? Can I extract the working pkg from my old snapshot image and integrate into the new one where curl is broken?

8

Sorry, I don't know enough about the build process.

AFAIK that's not possible.

9

Tried latest snapshot yesterday, curl is still broken :pensive_face:.

10

Workaround: Take the file "libcurl.so.4.8.0" from "r28926-9a7192c08e" and copy it into "/usr/lib" of a recent snapshot build. curl digest auth works again :slight_smile:

httpsx://limewire.com/d/E65HA#hy7N7ygQfa

Place to: /usr/lib/

11

Other "workaround" is to compile libcurl with OpenSSL instead of mbedTLS, that works for me.

1 Like
12

Anyone reported the problem with mbedTLS?

13

No, I do not understand this background and how to describe it properly.

Edit: https://github.com/openwrt/packages/commit/43b9a37a6ef0c69e834cf2967a3796804b7e3a48

1 Like
14

Still broken on r30208, just to give an update.

BusyBox v1.37.0 (2025-06-23 07:39:12 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r30208-1ce0eb5bf2
 -----------------------------------------------------
root@WifiAP-01:~# bash -c ". /root/fritzbox/lib-fritzbox.sh; fb_get_connecte
d_clients"
[ERROR] Could not retrieve mesh list. Wrong credentials?

After copying an old "libcurl.so.4.8.0" to "/usr/lib/", it works again and I get the MAC list from the FritzBox using curl digest auth.

Someone else reported this issue on the GitHub openwrt package feed: https://github.com/openwrt/packages/issues/25921

15

Still broken on r30812, just to give an update. I’m sorry I don’t have a deep understanding of the curl deps and build process to help here with a contribution. :face_with_raised_eyebrow:

16

Could folks see if this

fixes this issue for them? It seems not totally likely as this is a later issue.