[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Bug-wget] [PATCH] Change testenv/Test-auth-both.py from XFAIL to a

From: Tim Rühsen
Subject: Re: [Bug-wget] [PATCH] Change testenv/Test-auth-both.py from XFAIL to a normal test
Date: Sat, 22 Nov 2014 19:14:41 +0100
User-agent: KMail/4.14.2 (Linux/3.16.0-4-amd64; KDE/4.14.2; x86_64; ; )

Am Samstag, 22. November 2014, 18:56:43 schrieb Tim Rühsen:
> But the HTTP test server offers both (Digest,Basic) within a single WWW-
> Authenticate line. The ABNF in RFC2616 does not allow this:

Sorry, I meant RFC2617.

And found in RFC2616 4.2

   Multiple message-header fields with the same field-name MAY be
   present in a message if and only if the entire field-value for that
   header field is defined as a comma-separated list [i.e., #(values)].
   It MUST be possible to combine the multiple header fields into one
   "field-name: field-value" pair, without changing the semantics of the
   message, by appending each subsequent field-value to the first, each
   separated by a comma. The order in which header fields with the same
   field-name are received is therefore significant to the
   interpretation of the combined field value, and thus a proxy MUST NOT
   change the order of these field values when a message is forwarded.

RFC2617 does not have an explicit #(values) / comma-separated list defined for 
'Basic'. But maybe such a line would be valid:

WWW-Authenticate: BasIc realm="Wget-Test", DIgest realm="Test", 
opaque="548c574974e749c0cfae06302b9e559b", qop="auth"

So the questions are:
1. Is it allowed or not ?
2. Should Wget support it or not ? (which depends on real life occurences)


Attachment: signature.asc
Description: This is a digitally signed message part.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]