line 317:
  qop = removeQuotes(currentTokenValue);
needs to be:
  qop = currentTokenValue;

I was using the Tomcat 4.1.24 code as an example for Digest Authentication and
discovered that the hashes weren't matching in my code.  Since "auth" was being
stripped to "ut", the hashes were screwed up.  I checked the RFC 2617 spec
http://asg.web.cmu.edu/rfc/rfc2617.html#sec-3.5 and qop doesn't have quotes.

I searched the list and couldn't find if this was discovered or not, so I
decided to post here :)

Adam Hathcock


-------------------------------------------------
This mail sent through IMP: http://horde.org/imp/

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to