Skip to content

Various mod_auth_digest cleanups#661

Open
notroj wants to merge 2 commits into
apache:trunkfrom
notroj:mod_auth_digest-cleanups
Open

Various mod_auth_digest cleanups#661
notroj wants to merge 2 commits into
apache:trunkfrom
notroj:mod_auth_digest-cleanups

Conversation

@notroj
Copy link
Copy Markdown
Collaborator

@notroj notroj commented Jun 2, 2026

No description provided.

notroj and others added 2 commits June 2, 2026 17:28
  directive, which adds complexity for little benefit (avoids putting
  20 bytes through SHA1 for each auth attempt).
  (set_realm): Remove function.
  (gen_nonce_hash): Create the nonce hash here from scratch.
(RFC 2617, which replaced 2069, is now 26 years old)

* modules/aaa/mod_auth_digest.c (digest_config_rec): Remove qop_list
  field.
  (create_digest_dir_config): Remove qop_list initialization.
  (set_qop): Deprecate AuthDigestQop, only "auth" is supported.
  (note_digest_auth_failure): Always send qop="auth".
  (check_nc): Remove handling for qop=none.
  (old_digest): Remove function.
  (authenticate_digest_user): Reject requests with missing or
  non-"auth" qop value rather than falling back to RFC 2069.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant