bug in ftp(1)?

[Thomas Klausner <wiz%NetBSD.org@localhost>]

Hi!

When fetching the distfile for mail/courier-unicode, I see:

=> Bootstrap dependency digest>=20211023: found digest-20220214
=> Fetching courier-unicode-2.3.0.tar.bz2
=> Total size: 657354 bytes
Trying [2606:4700:4400::ac40:9691]:443 ...
Requesting https://sourceforge.net/projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2
ftp: Receiving HTTP reply: Input line is too long
fetch: Unable to fetch expected file courier-unicode-2.3.0.tar.bz2
...

wget fetches the file fine.

curl -v gives some more information on the return value:


curl -v https://sourceforge.net/projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2
* Host sourceforge.net:443 was resolved.
* IPv6: 2606:4700:4400::ac40:9691, 2606:4700:4400::6812:256f
* IPv4: 104.18.37.111, 172.64.150.145
*   Trying [2606:4700:4400::ac40:9691]:443...
* Connected to sourceforge.net (2606:4700:4400::ac40:9691) port 443
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
*  CAfile: none
*  CApath: /etc/openssl/certs
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519 / id-ecPublicKey
* ALPN: server accepted h2
* Server certificate:
*  subject: C=US; ST=California; L=San Francisco; O=Cloudflare, Inc.; CN=sourceforge.net
*  start date: Feb  4 00:00:00 2024 GMT
*  expire date: Dec 31 23:59:59 2024 GMT
*  subjectAltName: host "sourceforge.net" matched cert's "sourceforge.net"
*  issuer: C=US; O=Cloudflare, Inc.; CN=Cloudflare Inc ECC CA-3
*  SSL certificate verify ok.
*   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
*   Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 2: Public key type RSA (2048/112 Bits/secBits), signed using sha1WithRSAEncryption
* using HTTP/2
* [HTTP/2] [1] OPENED stream for https://sourceforge.net/projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2
* [HTTP/2] [1] [:method: GET]
* [HTTP/2] [1] [:scheme: https]
* [HTTP/2] [1] [:authority: sourceforge.net]
* [HTTP/2] [1] [:path: /projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2]
* [HTTP/2] [1] [user-agent: Mozilla/5.0]
* [HTTP/2] [1] [accept: */*]
> GET /projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2 HTTP/2
> Host: sourceforge.net
> User-Agent: Mozilla/5.0
> Accept: */*
>
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* old SSL session ID is stale, removing
< HTTP/2 301
< date: Sun, 18 Feb 2024 11:09:47 GMT
< content-type: text/html; charset=UTF-8
< location: https://sourceforge.net/projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2/
< cache-control: no-cache
< pragma: no-cache
< x-ua-compatible: IE=edge,chrome=1
< permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), document-domain=(), display-capture=(), autoplay=()
< feature-policy: geolocation 'none'; microphone 'none'; camera 'none'; payment 'none'; document-domain 'none'; display-capture 'none'; autoplay 'none'
< x-frame-options: SAMEORIGIN
< content-security-policy: frame-ancestors 'self'; script-src 'self' adservice.google.co.jp adservice.google.co.tz adservice.google.nr *.crsspxl.com adservice.google.ge adservice.google.com.gi adservice.google.com.br adservice.google.com.tr adservice.google.so adservice.google.com.pe adservice.google.com.sb adservice.google.st *.sharethrough.com adservice.google.com.co adservice.google.com.pk adservice.google.ad adservice.google.cv adservice.google.ws adservice.google.gm adservice.google.gy adservice.google.tn adservice.google.no adservice.google.rs *.gstatic.cn *.googlesyndication.com adservice.google.com.bn adservice.google.tm http://c.sf-syn.com translate.googleapis.com adservice.google.com.my adservice.google.as *.google.com adservice.google.com.tw *.2mdn.net adservice.google.de adservice.google.lu adservice.google.com.hk adservice.google.pl adservice.google.gg adservice.google.tt adservice.google.com.pa adservice.google.vu adservice.google.co.ve adservice.google.fi adservice.google.mu adservice.google.vg adservice.google.to adservice.google.co.th adservice.google.iq adservice.google.ml adservice.google.com.bo adservice.google.com.ai adservice.google.com.uy adservice.google.ro adservice.google.ae adservice.google.cg *.trustarc.com adservice.google.co.bw adservice.google.tg adservice.google.com.eg *.tiny.cloud adservice.google.rw adservice.google.cz adservice.google.gr adservice.google.co.id adservice.google.co.ls adservice.google.com.cu adservice.google.kz *.recaptcha.net adservice.google.bi adservice.google.com.jm adservice.google.se adservice.google.fr adservice.google.com.ag adservice.google.com.gt adservice.google.com.lb adservice.google.dm adservice.google.is *.slashdotmedia.com adservice.google.com.vn adservice.google.com.gh adservice.google.com.vc adservice.google.com.sg adservice.google.com.ly adservice.google.mg adservice.google.co.cr *.cloudflareinsights.com adservice.google.ps adservice.google.com.ng adservice.google.lk *.doubleverify.com adservice.google.com.fj adservice.google.com.bh adservice.google.com.bz adservice.google.be adservice.google.mv adservice.google.cl adservice.google.ga adservice.google.li adservice.google.ru adservice.google.at adservice.google.co.nz adservice.google.hn adservice.google.ne adservice.google.co.vi http://*.pro-market.net adservice.google.co.za adservice.google.co.mz adservice.google.gl adservice.google.com.tj adservice.google.com.bd adservice.google.la translate.google.cn adservice.google.lt adservice.google.fm adservice.google.dk adservice.google.ht adservice.google.com.pr adservice.google.com.cy *.doubleclick.net adservice.google.tl adservice.google.td btloader.com adservice.google.im adservice.google.al *.google-analytics.com adservice.google.ms adservice.google.co.ke adservice.google.je adservice.google.dz adservice.google.co.zm *.googletagmanager.com *.s-onetag.com adservice.google.pt adservice.google.com.mm adservice.google.com.na http://b.sf-syn.com adservice.google.com.np adservice.google.mk adservice.google.bg adservice.google.com.ni adservice.google.co.ao *.gstatic.com adservice.google.cd adservice.google.com.pg recaptcha.net adservice.google.sk adservice.google.com.kh adservice.google.ci adservice.google.az adservice.google.ie adservice.google.com.au adservice.google.sm adservice.google.nl adservice.google.com.ua adservice.google.nu adservice.google.it a.fsdn.com adservice.google.bt adservice.google.com.sv adservice.google.ch adservice.google.com.et adservice.google.ee adservice.google.bs *.moatads.com adservice.google.bf adservice.google.com.sa adservice.google.com.mx adservice.google.com.om *.microsofttranslator.com adservice.google.jo adservice.google.co.zw adservice.google.com.py adservice.google.mw *.4dex.io adservice.google.com.ar *.flashtalking.com *.script.ac adservice.google.cm adservice.google.kg *.googleadsserving.cn adservice.google.gt *.adsafeprotected.com adservice.google.com.af adservice.google.com.mt adservice.google.co.uz adservice.google.ki adservice.google.md adservice.google.si adservice.google.ca adservice.google.me adservice.google.dj adservice.google.co.ug adservice.google.com.ph adservice.google.sc *.consentmanager.net *.googletagservices.com adservice.google.es adservice.google.bj adservice.google.sr *.licdn.com adservice.google.co.uk *.microsoft.com *.lijit.com *.adnxs.com adservice.google.mn adservice.google.hu adservice.google.co.il adservice.google.lv adservice.google.com.kw adservice.google.com.ec adservice.google.co.kr adservice.google.cf adservice.google.com.qa adservice.google.co.ck adservice.google.co.in adservice.google.sn ml314.com adservice.google.hr 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; frame-src 'self' http://*.pro-market.net *.crsspxl.com *.google.com http://c.sf-syn.com http://b.sf-syn.com *.googlesyndication.com *.safeframe.usercontent.goog *.doubleclick.net *.recaptcha.net recaptcha.net *.youtube.com www.youtube-nocookie.com  *.consentmanager.net *.adnxs.com *.indexww.com *.rubiconproject.com *.pubmatic.com *.smartadserver.com *.lijit.com *.btloader.com; script-src-attr 'none' 'report-sample'; form-action 'self' lists.sourceforge.net; report-uri https://sourceforge.report-uri.com/r/d/csp/enforce; object-src 'none'
< x-content-type-options: nosniff
< strict-transport-security: max-age=31536000; includeSubDomains; preload
< cf-cache-status: HIT
< age: 91
< server: cloudflare
< cf-ray: 8575d1e28ee0c251-VIE
< alt-svc: h3=":443"; ma=86400
<
<html>
<head>
<title>301 Moved Permanently</title>
</head>
<body>
<h1>301 Moved Permanently</h1>
The resource has been moved to <a href="https://sourceforge.net/projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2/";>https://sourceforge.net/projects/courier/files/courier-unicode/2.3.0/courier-unicode-2.3.0.tar.bz2/</a>;
you should be redirected automatically.
</body>
* Connection #0 to host sourceforge.net left intact
</html>%


Do we need to increase an internal buffer size in ftp(1)?
 Thomas