curl/lib/vauth
Chris Talbot 7703ca7f86 digest: Use hostname to generate spn instead of realm
In https://www.rfc-editor.org/rfc/rfc2831#section-2.1.2

digest-uri-value should be serv-type "/" host , where host is:

      The DNS host name or IP address for the service requested.  The
      DNS host name must be the fully-qualified canonical name of the
      host. The DNS host name is the preferred form; see notes on server
      processing of the digest-uri.

Realm may not be the host, so we must specify the host explicitly.

Note this change only affects the non-SSPI digest code. The digest code
used by SSPI builds already uses the hostname to generate the spn.

Ref: https://github.com/curl/curl/issues/11369

Closes https://github.com/curl/curl/pull/11395
2023-09-08 03:23:44 -04:00
..
cleartext.c openldap: fix missing sasl symbols at build in specific configs 2023-02-09 08:17:20 +01:00
cram.c lib: add ability to disable auths individually 2023-09-07 17:45:06 +02:00
digest_sspi.c lib: add ability to disable auths individually 2023-09-07 17:45:06 +02:00
digest.c digest: Use hostname to generate spn instead of realm 2023-09-08 03:23:44 -04:00
digest.h lib: add ability to disable auths individually 2023-09-07 17:45:06 +02:00
gsasl.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
krb5_gssapi.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
krb5_sspi.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
ntlm_sspi.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
ntlm.c nss: remove support for this TLS library 2023-07-29 23:44:28 +02:00
ntlm.h copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
oauth2.c openldap: fix missing sasl symbols at build in specific configs 2023-02-09 08:17:20 +01:00
spnego_gssapi.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
spnego_sspi.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
vauth.c copyright: update all copyright lines and remove year ranges 2023-01-03 09:19:21 +01:00
vauth.h lib: add ability to disable auths individually 2023-09-07 17:45:06 +02:00