You are viewing a plain text version of this content. The canonical link for it is here.

Posted to bugs@httpd.apache.org by bu...@apache.org on 2005/06/09 22:29:45 UTC

DO NOT REPLY [Bug 35296] New: - PATCH: fix ap_auth_nonce().

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=35296>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=35296

           Summary: PATCH: fix ap_auth_nonce().
           Product: Apache httpd-1.3
           Version: HEAD
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: core
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: lesanti@sinectis.com.ar
                CC: lesanti@sinectis.com.ar


It seems that a recent (ie post 1.3.31) change to ap_auth_nonce() makes 
digest authentication behave erratically when using mod_digest.so.

The change was meant to include the local *endpoint* in the nonce 
generation, but the code is still passing a pointer to the local *address*.

Please, take a look at the patch for more information.

Leandro.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org