Paul Cormier wrote:
>
> <cfset A1 = Hash("#UserName#:#MLSID#:#Password#", "MD5")>
> <cfset A2 = Hash("GET:#Login_uri#", "MD5")>
> <cfset response = lCase(Hash("#A1#:#nonce#:#A2#", "MD5"))>
The CFML Hash function returns an uppercase hash, the RFC expects a
lowercase hash. You need to lowercase A1 before you hash it again to
create your response variable.
I don't see any obvious problems with the rest, so you really need a
proxy / sniffer because the difference between an uppercase and a
lowercase hash will not give a 400 Bad Request.
Jochem
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Create Web Applications With ColdFusion MX7 & Flex 2.
Build powerful, scalable RIAs. Free Trial
http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJS
Archive:
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:277577
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
