generic-library/curl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Olaf Stben fixed a bug that caused Digest authentication with md5-sess to

Browse Source 
fail. When using the md5-sess, the result was not Md5 encoded and Base64
transformed.
This commit is contained in:
Daniel Stenberg
2006-05-25 23:04:20 +00:00
parent fb88723afc
commit 752acedc0b
3 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@@ -6,6 +6,11 @@
Changelog Changelog
Daniel (26 May 2006)
- Olaf St<53>ben fixed a bug that caused Digest authentication with md5-sess to
fail. When using the md5-sess, the result was not Md5 encoded and Base64
transformed.
Daniel (25 May 2006) Daniel (25 May 2006)
- Michael Wallner provided a patch that allows "SESS" to be set with - Michael Wallner provided a patch that allows "SESS" to be set with
CURLOPT_COOKIELIST, which then makes all session cookies get cleared. CURLOPT_COOKIELIST, which then makes all session cookies get cleared.

3
RELEASE-NOTES
View File

@@ -22,6 +22,7 @@ This release includes the following changes:
This release includes the following bugfixes: This release includes the following bugfixes:
o md5-sess with Digest authentication
o dict with letters such as space in a word o dict with letters such as space in a word
o dict with url-encoded words in the URL o dict with url-encoded words in the URL
o libcurl.m4 when default=yes but no libcurl was found o libcurl.m4 when default=yes but no libcurl was found
@@ -57,6 +58,6 @@ advice from friends like these:
Dan Fandrich, Ilja van Sprundel, David McCreedy, Tor Arntsen, Xavier Bouchoux, Dan Fandrich, Ilja van Sprundel, David McCreedy, Tor Arntsen, Xavier Bouchoux,
David Byron, Michele Bini, Ates Goral, Katie Wang, Robson Braga Araujo, David Byron, Michele Bini, Ates Goral, Katie Wang, Robson Braga Araujo,
Ale Vesely, Paul Querna, Gisle Vanem, Mark Eichin, Roland Blom, Andreas Ale Vesely, Paul Querna, Gisle Vanem, Mark Eichin, Roland Blom, Andreas
Ntaflos, David Shaw, Michael Wallner Ntaflos, David Shaw, Michael Wallner, Olaf St<53>ben
Thanks! (and sorry if I forgot to mention someone) Thanks! (and sorry if I forgot to mention someone)

7
lib/http_digest.c
View File

@@ -5,7 +5,7 @@
* | (__| |_| | _ <| |___ * | (__| |_| | _ <| |___
* \___|\___/|_| \_\_____| * \___|\___/|_| \_\_____|
* *
* Copyright (C) 1998 - 2004, Daniel Stenberg, <daniel@haxx.se>, et al. * Copyright (C) 1998 - 2006, Daniel Stenberg, <daniel@haxx.se>, et al.
* *
* This software is licensed as described in the file COPYING, which * This software is licensed as described in the file COPYING, which
* you should have received as part of this distribution. The terms * you should have received as part of this distribution. The terms
@@ -303,10 +303,11 @@ CURLcode Curl_output_digest(struct connectdata *conn,
if(d->algo == CURLDIGESTALGO_MD5SESS) { if(d->algo == CURLDIGESTALGO_MD5SESS) {
/* nonce and cnonce are OUTSIDE the hash */ /* nonce and cnonce are OUTSIDE the hash */
tmp = aprintf("%s:%s:%s", ha1, d->nonce, d->cnonce); tmp = aprintf("%s:%s:%s", ha1, d->nonce, d->cnonce);
free(ha1);
if(!tmp) if(!tmp)
return CURLE_OUT_OF_MEMORY; return CURLE_OUT_OF_MEMORY;
ha1 = (unsigned char *)tmp; Curl_md5it(md5buf, (unsigned char *)tmp);
free(tmp); /* free this again */
md5_to_ascii(md5buf, ha1);
} }
/* /*