ddns-scripts: unwanted openssl-utils and curl depends for ovh

[danielfdickinson]

Package Name

ddns-scripts

Maintainer

@feckert

OpenWrt Version

SNAPSHOT

OpenWrt Target/Subtarget

bcm27xx/bcm2712

Steps to Reproduce

1. Install ddns-scripts and ddns-scripts-ovh

Actual Behaviour

openssl-utils and curl are pulled in

These are heavy dependencies and should not be necessary.

The original 'root cause' analysis in #27526 is flawed. It claims that the OVH DynHost API has changed. This is not the case as 24.10.5 systems using ddns-scripts for the ovh provider continue to work well.

This mistaken analysis has lead to a much heaver 'solution' than is likely required, and consists of an ad-hoc usage of HTTPS Basic Authentication using a script relying on openssl and curl.

I believe (and am working on setting things up to do this myself) determining the true 'root cause' of the issue and implementing a lighter-weight solution should be preferred.

Confirmation Checklist

• The package is maintained in this repository.
• I understand that issues related to the base OpenWrt repository or LuCI repository will be closed.
• I am reporting an issue for OpenWrt, not an unsupported fork.

[danielfdickinson]

Findings with #27561 and #27694 removed:

1. If I use wget-ssl with the correct credentials, the OVH update succeeds.
2. If I typo the username, I get unauthorized message similar to the original reporter's experience.
3. If I use cURL, I get an unauthorized message, regardless of correct credentials or not.

So, the issue is not the API it is a change in cURL's behaviour (or something in ddns-scripts calls cURL differently).

@davidandreoletti @devfaz

[danielfdickinson]

Found the problem. Commit ea66e46 43b9a37 added an configuration option for HTTP_AUTH for cURL with default to disabled.

However, the previous default (which was used because http auth was neither enabled or disabled, and cURL's config defaults that case to enabled) was HTTP AUTH was enabled in cURL.

So the commit broke anything that used HTTP AUTH (including user and password in the URL) with cURL.

I am working on a PR now.