"The algorithm field in digest authentication must not be quoted."

Could you point out where in the HTTP specification is this a requirement?




On Tue, May 21, 2013 at 7:17 AM, Mark Thornton (JIRA) <j...@apache.org>wrote:

> Mark Thornton created HTTPCLIENT-1354:
> -----------------------------------------
>
>              Summary: algorithm field in digest auth should not be quoted
>                  Key: HTTPCLIENT-1354
>                  URL:
> https://issues.apache.org/jira/browse/HTTPCLIENT-1354
>              Project: HttpComponents HttpClient
>           Issue Type: Bug
>           Components: HttpClient
>     Affects Versions: 4.2.5
>             Reporter: Mark Thornton
>
>
> The algorithm field in digest authentication must not be quoted. The
> current version of tomcat shipped with Ubuntu 13.04 insists on this (though
> future versions of tomcat are more relaxed).
>
> https://issues.apache.org/bugzilla/show_bug.cgi?id=54060
>
> see comment 12.
>
> Httpclient will thus fail to authenticate against tomcat 7.0.33 to 7.0.35,
> but should work against 7.0.36 and later.  Note that the fix in tomcat
> 7.0.36 is to accommodate clients that are not conforming to the
> specification.
>
> --
> This message is automatically generated by JIRA.
> If you think it was sent incorrectly, please contact your JIRA
> administrators
> For more information on JIRA, see: http://www.atlassian.com/software/jira
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org
> For additional commands, e-mail: dev-h...@hc.apache.org
>
>


-- 
E-Mail: garydgreg...@gmail.com | ggreg...@apache.org
Java Persistence with Hibernate, Second Edition<http://www.manning.com/bauer3/>
JUnit in Action, Second Edition <http://www.manning.com/tahchiev/>
Spring Batch in Action <http://www.manning.com/templier/>
Blog: http://garygregory.wordpress.com
Home: http://garygregory.com/
Tweet! http://twitter.com/GaryGregory

Reply via email to