[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[libmicrohttpd] 06/20: digestauth: warn about RFC2069 used with SHA-256
From: |
gnunet |
Subject: |
[libmicrohttpd] 06/20: digestauth: warn about RFC2069 used with SHA-256 |
Date: |
Mon, 15 Aug 2022 20:38:32 +0200 |
This is an automated email from the git hooks/post-receive script.
karlson2k pushed a commit to branch master
in repository libmicrohttpd.
commit 39b9f6cf6d67667aebb4d113a50796e680e83684
Author: Evgeny Grin (Karlson2k) <k2k@narod.ru>
AuthorDate: Sun Aug 14 18:09:59 2022 +0300
digestauth: warn about RFC2069 used with SHA-256
---
src/microhttpd/digestauth.c | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/src/microhttpd/digestauth.c b/src/microhttpd/digestauth.c
index f01dfc0a..3efc0288 100644
--- a/src/microhttpd/digestauth.c
+++ b/src/microhttpd/digestauth.c
@@ -2083,6 +2083,13 @@ digest_auth_check_all_inner (struct MHD_Connection
*connection,
#endif /* HAVE_MESSAGES */
return MHD_DAUTH_WRONG_QOP;
}
+#ifdef HAVE_MESSAGES
+ if ((MHD_DIGEST_AUTH_QOP_NONE == c_qop) &&
+ (0 == (((unsigned int) c_algo) & MHD_DIGEST_BASE_ALGO_MD5)))
+ MHD_DLOG (connection->daemon,
+ _ ("RFC2069 with SHA-256 algorithm is non-standard " \
+ "extension.\n"));
+#endif /* HAVE_MESSAGES */
digest_size = digest_get_size (&da);
@@ -2921,6 +2928,10 @@ MHD_queue_auth_required_response3 (struct MHD_Connection
*connection,
MHD_DLOG (connection->daemon,
_ ("The 'userhash' and 'charset' ('prefer_utf8') parameters " \
"are not compatible with RFC2069 and ignored.\n"));
+ if (0 == (((unsigned int) s_algo) & MHD_DIGEST_BASE_ALGO_MD5))
+ MHD_DLOG (connection->daemon,
+ _ ("RFC2069 with SHA-256 algorithm is non-standard " \
+ "extension.\n"));
#endif
userhash_support = 0;
prefer_utf8 = 0;
--
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.
- [libmicrohttpd] branch master updated (9a18a4f8 -> c63be03c), gnunet, 2022/08/15
- [libmicrohttpd] 04/20: digestauth: add log warning for empty random data, gnunet, 2022/08/15
- [libmicrohttpd] 01/20: digestauth: use internal header for mutex instead of system header, gnunet, 2022/08/15
- [libmicrohttpd] 06/20: digestauth: warn about RFC2069 used with SHA-256,
gnunet <=
- [libmicrohttpd] 05/20: digestauth: corrected log message for RFC2069 mode, gnunet, 2022/08/15
- [libmicrohttpd] 16/20: test_digestauth2: minor improvements, gnunet, 2022/08/15
- [libmicrohttpd] 18/20: test_digestauth_concurrent: added debug print, gnunet, 2022/08/15
- [libmicrohttpd] 12/20: test_digestauth2: added testing with two requests, gnunet, 2022/08/15
- [libmicrohttpd] 08/20: digestauth: added log messages if realm is rejected due to its size, gnunet, 2022/08/15
- [libmicrohttpd] 03/20: daemon.c: cosmetics, gnunet, 2022/08/15
- [libmicrohttpd] 07/20: digestauth: do not use "algorithm" in response header in RFC2069 mode, gnunet, 2022/08/15
- [libmicrohttpd] 11/20: Added MHD_OPTION_DIGEST_AUTH_NONCE_BIND_TYPE to control how to generate and check nonces for Digest Auth, gnunet, 2022/08/15
- [libmicrohttpd] 10/20: daemon.c: fixed and simplified sockaddr alignment handling, gnunet, 2022/08/15
- [libmicrohttpd] 02/20: microhttpd: minor doxy improvement, gnunet, 2022/08/15