Ah, that was the problem. Though only the “firmware_check” command transfers the firmware file, all three commands must use POST.
Thanks for the help!