Curl digest auth broken

Hi,

I'm on Xiaomi ax3600 using Openwrt snapshots. One of my cron scripts uses curl digest auth. This no longer sends the correct authorization flow (checked via -vv).

Last worked on: r28926-openwrt-6397057851a8-qualcommax-ipq807x-xiaomi_ax3600-squashfs-sysupgrade.bin

Short after that build number it broke. I rolled back to r28926 and it worked again. Tried the recent build nr as they appeared - broken again.

Is there some apk dependency missing or sth wrong with the curl package itself?

Thanks.

I have a similar curl issue, curl 8.10.1 works, curl 8.12.1 doesn't.

1 Like

I suspect its not the curl version itself to blame, because my same script works on debian linux with the same curl version.

I tend to agree it's not the curl version at play.

I just installed Kali Linux Rolling (Windows Subsystem for Linux) distribution on my windows PC.

This WSL distribution has the same curl version as the current snapshot version 8.12.1-2 and it works fine.

1 Like

Should we just wait until curl updates again?

As suggested, rebuild the package by reverting its make file and build it from scratch or wait for the next version?

What commands are required to run on my debian box to build a working version? Can I extract the working pkg from my old snapshot image and integrate into the new one where curl is broken?

Sorry, I don't know enough about the build process.

AFAIK that's not possible.

Tried latest snapshot yesterday, curl is still broken :pensive_face:.

Workaround: Take the file "libcurl.so.4.8.0" from "r28926-9a7192c08e" and copy it into "/usr/lib" of a recent snapshot build. curl digest auth works again :slight_smile:

httpsx://limewire.com/d/E65HA#hy7N7ygQfa

Place to: /usr/lib/

Other "workaround" is to compile libcurl with OpenSSL instead of mbedTLS, that works for me.

1 Like

Anyone reported the problem with mbedTLS?

No, I do not understand this background and how to describe it properly.

Edit: https://github.com/openwrt/packages/commit/43b9a37a6ef0c69e834cf2967a3796804b7e3a48

1 Like

Still broken on r30208, just to give an update.

BusyBox v1.37.0 (2025-06-23 07:39:12 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r30208-1ce0eb5bf2
 -----------------------------------------------------
root@WifiAP-01:~# bash -c ". /root/fritzbox/lib-fritzbox.sh; fb_get_connecte
d_clients"
[ERROR] Could not retrieve mesh list. Wrong credentials?

After copying an old "libcurl.so.4.8.0" to "/usr/lib/", it works again and I get the MAC list from the FritzBox using curl digest auth.

Someone else reported this issue on the GitHub openwrt package feed: https://github.com/openwrt/packages/issues/25921

Still broken on r30812, just to give an update. I’m sorry I don’t have a deep understanding of the curl deps and build process to help here with a contribution. :face_with_raised_eyebrow:

Could folks see if this

fixes this issue for them? It seems not totally likely as this is a later issue.