[HTTPCLIENT-1354] Algorithm field in digest auth should not be quoted

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.2.5
• Fix Version/s: 4.3 Beta2
• Component/s: HttpClient (classic)
• Assignee: Unassigned
• Reporter: Mark Thornton
• Created: 21/May/13 11:16
• Updated: 05/Oct/13 19:41
• Resolved: 22/May/13 14:02

Description

The algorithm field in digest authentication must not be quoted. The current version of tomcat shipped with Ubuntu 13.04 insists on this (though future versions of tomcat are more relaxed).

https://issues.apache.org/bugzilla/show_bug.cgi?id=54060

see comment 12.

Httpclient will thus fail to authenticate against tomcat 7.0.33 to 7.0.35, but should work against 7.0.36 and later. Note that the fix in tomcat 7.0.36 is to accommodate clients that are not conforming to the specification.