View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001633 | libmicrohttpd | digest authentication (HTTP) | public | 2010-12-21 08:27 | 2010-12-25 23:22 |
| Reporter | bytex64 | Assigned To | Christian Grothoff | ||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Summary | 0001633: Digest auth cnonce is truncated to 40 characters | ||||
| Description | (Version is actually 0.9.3 -- this version was not listed in the "Product Version" drop-down) libmicrohttpd's digest auth implementation truncates the cnonce to 40 characters (MAX_NONCE_LENGTH - 1). RFC 2617 doesn't specify a limit on the size of the cnonce, and some browsers (Opera, in my case) produce cnonce values that are over 40 characters long. This causes digest auth to fail. Increasing the value of MAX_NONCE_LENGTH fixes the problem. | ||||
| Tags | No tags attached. | ||||
|
|
So what would be a reasonable limit? |
|
|
Opera's cnonces are at least 43 characters. I'd put it at 50, but some other overzealous browser could exceed that (though it seems quite unlikely). |
|
|
Fixed in SVN 14055. |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2010-12-21 08:27 | bytex64 | New Issue | |
| 2010-12-21 14:21 | Christian Grothoff | Note Added: 0004211 | |
| 2010-12-21 14:26 | Christian Grothoff | Status | new => feedback |
| 2010-12-21 21:24 | bytex64 | Note Added: 0004214 | |
| 2010-12-23 15:41 | Christian Grothoff | Note Added: 0004215 | |
| 2010-12-23 15:41 | Christian Grothoff | Status | feedback => resolved |
| 2010-12-23 15:41 | Christian Grothoff | Resolution | open => fixed |
| 2010-12-23 15:41 | Christian Grothoff | Assigned To | => Christian Grothoff |
| 2010-12-25 23:22 | Christian Grothoff | Status | resolved => closed |
| 2013-05-06 12:52 | Christian Grothoff | Category | digest authentication => digest authentication (HTTP) |
