Re: [Bug-wget] [PATCH] Change testenv/Test-auth-both.py from XFAIL to a normal test

[Tim Rühsen]

Am Samstag, 22. November 2014, 18:56:43 schrieb Tim Rühsen:
> But the HTTP test server offers both (Digest,Basic) within a single WWW-
> Authenticate line. The ABNF in RFC2616 does not allow this:

Sorry, I meant RFC2617.

And found in RFC2616 4.2

   Multiple message-header fields with the same field-name MAY be
   present in a message if and only if the entire field-value for that
   header field is defined as a comma-separated list [i.e., #(values)].
   It MUST be possible to combine the multiple header fields into one
   "field-name: field-value" pair, without changing the semantics of the
   message, by appending each subsequent field-value to the first, each
   separated by a comma. The order in which header fields with the same
   field-name are received is therefore significant to the
   interpretation of the combined field value, and thus a proxy MUST NOT
   change the order of these field values when a message is forwarded.

RFC2617 does not have an explicit #(values) / comma-separated list defined for 
'Basic'. But maybe such a line would be valid:

WWW-Authenticate: BasIc realm="Wget-Test", DIgest realm="Test", 
nonce="f07e391eb19dfb441f191f5de7ba687f", 
opaque="548c574974e749c0cfae06302b9e559b", qop="auth"

So the questions are:
1. Is it allowed or not ?
2. Should Wget support it or not ? (which depends on real life occurences)

Tim

signature.asc
Description: This is a digitally signed message part.