Details
-
Bug
-
Status: Closed
-
Minor
-
Resolution: Fixed
-
Davix 0.6.8
-
Security Level: Public Data (This ticket is visible to anyone on the internet and will be indexed by search engines)
-
None
Description
it appears that the Digest handler is handled incorrectly, at least if I'm reading https://tools.ietf.org/html/rfc3230#section-4.2 correctly.
The three things I noted are:
- MD5 and SHA digests should be base64-encoded. We may want to look at the official registry (https://www.iana.org/assignments/http-dig-alg/http-dig-alg.xhtml#http-dig-alg-1) and make sure we convert this correctly from the ones used by common SEs.
- We probably need to translate cksum -> UNIXcksum and SHA1 -> SHA.
- The response may contain multiple Digest, even those the client did not ask for. DAVIX client code appears to assume there is only one?