(Sorry for the eventual repost, but it seems that the subscription
system of the mailing list was a bit confused these days..)

Hi there.

I spent some time trying to figure out why such a program does not work:

  curl = curl_easy_init();

  curl_easy_setopt(curl, CURLOPT_HTTPAUTH,CURLAUTH_DIGEST);
  curl_easy_setopt(curl, CURLOPT_USERPWD,"myusername:mypassword");
  curl_easy_setopt(curl, CURLOPT_URL, "soap_server_url");
  curl_easy_setopt(curl, CURLOPT_POSTFIELDS, "soap_request");

  res = curl_easy_perform(curl);

The problem is the following:

1) if CURLAUTH_DIGEST is used without CURLOPT_USERPWD, then a request
is made, but, of course, it fails because the user and password are unknown ;-)

2) if CURLAUTH_DIGEST is used with CURLOPT_USERPWD, then the request
is broken: the body is empty, without the post data. So the server
does not even reply with the nounce field...

3) I can have everything right if I force conn->user & conn->passwd in
http_digest.c, not using CURLOPT_USERPWD.

So there is something very strange going on when someone tries to set
user/passwd while using digest authentification.

I do not know libcurl enough to correctly locate the problem and offer
a nice fix, I'm afraid I could break something else.

I've just found that:

- In url.c, if I comment line 2009:

conn->bits.user_passwd = data->set.userpwd?1:0;
then I've everything okay.

OR:

- In http.c, If I comment lines 212-213:

        else if(conn->bits.user_passwd)
          Curl_http_auth_stage(data, 401);

then it's also okay.

I can test any fix on a server with digest authentification if needed,
however I can not provide credentials to someone else since the server
is not mine.

However it is very easy to test the problem with any URL, even one
that does not exist, since one can see that the request is really
broken when both options are activated.

Cheers,

        Bernard

-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
Received on 2004-01-27