Add a New Comment (Rich Markup)
The mixture of HTTP 1.0 and 1.1 is already fixed in 1.3.14. Yesterday i posted a patch on the mailing list to support RFC 2617. I got a positive response from Michael Tarkowski, saying his former problem is solved with the patch applied. The patch is backward compatible with RFC 2069 (server does not send qop). Any other than qop='auth' or algorithm=MD5 is not supported so far. But that should cover 95% of all use cases. The patch is not in the git yet.
I am experiencing this issue using wget to download a file protected with Http digest authentication in nginx. Curl & chrome succeed to authenticate. Wget does not.
Wget uses some funny mixture from HTTP/1.0 and obsolete Digest Access Authentication from RFC 2069 instead actual RFC 2617 and HTTP/1.1 -------------------------------------------------- Log for wget: wget -t 1 --http-user=root --http-password=pass http://localhost:8008/dir.txt GET /dir.txt HTTP/1.0 connection: Keep-Alive host: localhost:8008 accept: / user-agent: Wget/1.12 (linux-gnu) Responce: HTTP/1.0 401 Unauthorized WWW-Authenticate: Digest realm="Mobile web",qop="auth",domain="/",nonce="9FE62FF7754C7986F7F67162E4717814" Content-Type: text/html Content-Length: 210 Connection: Keep-Alive Keep-Alive: timeout=3, max=100 GET /dir.txt HTTP/1.0 authorization: Digest username="root", realm="Mobile web", nonce="9FE62FF7754C7986F7F67162E4717814", uri="/dir.txt", response="ded7bb3affcf0f91bfe18dd443a7ffed" connection: Keep-Alive host: localhost:8008 accept: / user-agent: Wget/1.12 (linux-gnu) Authentication failed: md5(cd4dec95ec0056cdd5c130076ee3fe3e:9FE62FF7754C7986F7F67162E4717814:::auth:13be09fe00f018b919d8373bad8a0417) !=ded7bb3affcf0f91bfe18dd443a7ffed Responce: HTTP/1.0 401 Unauthorized WWW-Authenticate: Digest realm="Mobile web",qop="auth",domain="/",nonce="F7A81D8051617E2C322E85E7F966320D" Content-Type: text/html Content-Length: 210 Connection: Keep-Alive Keep-Alive: timeout=3, max=100 ps: ded7bb3affcf0f91bfe18dd443a7ffed = md5(cd4dec95ec0056cdd5c130076ee3fe3e:9FE62FF7754C7986F7F67162E4717814:13be09fe00f018b919d8373bad8a0417) -------------------------------------------------- Log for Mozilla: GET /dir.txt HTTP/1.1 authorization: Digest username="root", realm="Mobile web", nonce="30206BADD9E5F56EA69EA96B871BDE40", uri="/dir.txt", response="5b09228d6c1d87cdaa1eb4fbe8fd8a7c", qop=auth, nc=00000003, cnonce="59e2e4701161e042" if-none-match: 5373326-734421-46485 connection: keep-alive keep-alive: 300 accept-charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 accept-encoding: gzip,deflate accept-language: en-us,en;q=0.5 accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 user-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.16) Gecko/20101227 Conkeror/0.9.2 (Debian-0.9.2+git100804-1) host: localhost:8008 forget nonce 30206BADD9E5F56EA69EA96B871BDE40 Authentication failed: stale Responce: HTTP/1.1 401 Unauthorized WWW-Authenticate: Digest realm="Mobile web",qop="auth",domain="/",stale="true",nonce="4B8E9B93A657D935A0DCB3DD5C5FBD9A" Content-Type: text/html Content-Length: 210 Connection: Keep-Alive Keep-Alive: timeout=3, max=100 GET /dir.txt HTTP/1.1 authorization: Digest username="root", realm="Mobile web", nonce="4B8E9B93A657D935A0DCB3DD5C5FBD9A", uri="/dir.txt", response="b16350801eabc5e73ea2e042af5f4195", qop=auth, nc=00000001, cnonce="670e5b31cbb7716d" if-none-match: 5373326-734421-46485 connection: keep-alive keep-alive: 300 accept-charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 accept-encoding: gzip,deflate accept-language: en-us,en;q=0.5 accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 user-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.16) Gecko/20101227 Conkeror/0.9.2 (Debian-0.9.2+git100804-1) host: localhost:8008 Responce: HTTP/1.1 200 Ok Authentication-Info: nextnonce="EA69F30661F022C6F2B67685EDFF063F", rspauth="94e484f6d993fd6554affb7b206d4d3d", cnonce="670e5b31cbb7716d", nc=00000001, qop="auth" ETag: 5373326-734421-46485 Content-Type: text/plain Content-Length: 5373326 http://bugs.debian.org/609836
(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)
Attach Files: Comment:
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
Please enter the title of George Orwell's famous dystopian book (it's a date):
Follow 2 latest changes.
Copyright © 2023 Free Software Foundation, Inc. Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved. The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team. Source Code
Powered by Savane 3.11