dgaudet 98/01/19 16:09:29
Modified: . Tag: APACHE_1_2_X STATUS
src Tag: APACHE_1_2_X CHANGES http_protocol.c
Log:
test "basic" token with strcasecmp
Submitted by: [EMAIL PROTECTED]
Reviewed by: Dean Gaudet, Martin Kraemer, Ken Coar
Revision Changes Path
No revision
No revision
1.1.2.15 +1 -0 apache/Attic/STATUS
Index: STATUS
===================================================================
RCS file: /export/home/cvs/apache/Attic/STATUS,v
retrieving revision 1.1.2.14
retrieving revision 1.1.2.15
diff -u -r1.1.2.14 -r1.1.2.15
--- STATUS 1998/01/14 00:09:30 1.1.2.14
+++ STATUS 1998/01/20 00:09:22 1.1.2.15
@@ -12,6 +12,7 @@
* Dean's backport of the bputc()/chunking bugfix.
* Ralf's mod_rewrite bugfix for %3f
* backport of the netscape header padding fix
+ * general/1666: basic auth token should be tested case-insensitive
Available:
No revision
No revision
1.286.2.67 +3 -0 apache/src/CHANGES
Index: CHANGES
===================================================================
RCS file: /export/home/cvs/apache/src/CHANGES,v
retrieving revision 1.286.2.66
retrieving revision 1.286.2.67
diff -u -r1.286.2.66 -r1.286.2.67
--- CHANGES 1998/01/14 00:09:32 1.286.2.66
+++ CHANGES 1998/01/20 00:09:23 1.286.2.67
@@ -1,5 +1,8 @@
Changes with Apache 1.2.6
+ *) "basic" auth token should be tested case-insensitive.
+ [EMAIL PROTECTED] PR#1666
+
*) It appears the "257th byte" bug (see
htdocs/manual/misc/known_client_problems.html#257th-byte) can happen
at the 256th byte as well. Fixed. [Dean Gaudet]
1.126.2.8 +1 -1 apache/src/http_protocol.c
Index: http_protocol.c
===================================================================
RCS file: /export/home/cvs/apache/src/http_protocol.c,v
retrieving revision 1.126.2.7
retrieving revision 1.126.2.8
diff -u -r1.126.2.7 -r1.126.2.8
--- http_protocol.c 1998/01/14 00:09:33 1.126.2.7
+++ http_protocol.c 1998/01/20 00:09:25 1.126.2.8
@@ -927,7 +927,7 @@
return AUTH_REQUIRED;
}
- if (strcmp(getword (r->pool, &auth_line, ' '), "Basic")) {
+ if (strcasecmp(getword (r->pool, &auth_line, ' '), "Basic")) {
/* Client tried to authenticate using wrong auth scheme */
log_reason ("client used wrong authentication scheme", r->uri, r);
note_basic_auth_failure (r);
