View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0005165libmicrohttpddigest authentication (HTTP)public2017-10-29 20:162018-12-08 22:10
Reporterrockdaboot Assigned ToChristian Grothoff Due Date
PrioritynormalSeverityfeatureReproducibilityN/A
Status closedResolutionfixed 
Product VersionGit master 
Target Version0.9.62Fixed in Version0.9.62 
Summary0005165: Add support for RFC 7616 (Digest Auth with SHA-256)
DescriptionIn short: Removes the need for insecure MD5 hashes, replaces those with SHA-256.

Wget2 and Curl now support it. At least Wget2 needs MHD support for this for it's test suite.
TagsNo tags attached.

Activities

Christian Grothoff

2018-10-05 17:25

manager   ~0013261

Agreed, we should do this.

Christian Grothoff

2018-11-20 21:29

manager   ~0013349

Added sha256.{c,h} for now.

Christian Grothoff

2018-12-08 16:36

manager   ~0013398

6bb3796f..bcba3f58 adds an untested implementation. Doesn't break anything for MD5, but not yet tested!

Christian Grothoff

2018-12-08 21:55

manager   ~0013399

Tested and documented in bcba3f58..2897bd23

Issue History

Date ModifiedUsernameFieldChange
2017-10-29 20:16rockdabootNew Issue
2018-10-05 17:25Christian GrothoffStatusnew => confirmed
2018-10-05 17:25Christian GrothoffNote Added: 0013261
2018-11-20 21:29Christian GrothoffNote Added: 0013349
2018-12-07 07:37Christian GrothoffAssigned To => Christian Grothoff
2018-12-07 07:37Christian GrothoffStatusconfirmed => assigned
2018-12-07 07:37Christian GrothoffProduct Version => Git master
2018-12-07 07:37Christian GrothoffTarget Version => 0.9.62
2018-12-08 16:36Christian GrothoffNote Added: 0013398
2018-12-08 21:55Christian GrothoffStatusassigned => resolved
2018-12-08 21:55Christian GrothoffResolutionopen => fixed
2018-12-08 21:55Christian GrothoffFixed in Version => 0.9.62
2018-12-08 21:55Christian GrothoffNote Added: 0013399
2018-12-08 22:10Christian GrothoffStatusresolved => closed