Joe Orton 899294692f mod_auth_digest: Widen the one-time-nonce counter to 64 bits and move ...

inside the client hash table:

* modules/aaa/mod_auth_digest.c (struct hash_table): Hold the counter here
  as a 64-bit otn_counter, issued under client_lock like next_id rather
  than with 32-bit atomics (apr_atomic_inc64 is not available on the
  minimum APR).
  (initialize_tables): Seed it; drop its separate shared-memory allocation.
  (gen_nonce): Issue the ordinal under client_lock.
  (set_shmem_size): Account for two allocations rather than three.

* test/modules/aaa/test_006_config_errors.py
  (test_digest_069_shmemsize_no_room_for_entry_rejected): Adjust for the
  smaller minimum.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
GitHub: close #787


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1939038 13f79535-47bb-0310-9956-ffa450edef68

2026-10-11 13:55:33 +00:00

..

htdocs/digest

* modules/aaa/mod_auth_digest.c: Consolidate one-time nonce handling

2026-08-13 15:15:19 +00:00

__init__.py

* test/modules/aaa: Add missing __init__.py.

2026-08-13 16:18:30 +00:00

conftest.py

mod_auth_digest: Send Digest domain= for a reverse-proxied request:

2026-10-11 13:44:17 +00:00

digest_client.py

…

env.py

mod_auth_digest: Send Digest domain= for a reverse-proxied request:

2026-10-11 13:44:17 +00:00

test_001_challenge_response.py

mod_auth_digest: Reject an Authorization uri which fails to unescape:

2026-10-11 13:42:22 +00:00

test_002_nonce.py

mod_auth_digest: Use siphash for the nonce hash where available:

2026-09-01 10:19:49 +00:00

test_003_nccheck.py

mod_auth_digest: Validate the nonce-count when parsing the header:

2026-10-11 13:29:47 +00:00

test_004_domain.py

…

test_005_provider.py

…

test_006_config_errors.py

mod_auth_digest: Widen the one-time-nonce counter to 64 bits and move

2026-10-11 13:55:33 +00:00

test_007_replay.py

* modules/aaa/mod_auth_digest.c: Fix AuthDigestNcCheck: track the

2026-08-13 15:15:07 +00:00

test_008_onetime_nccheck.py

* modules/aaa/mod_auth_digest.c (gc): Discard the entries of clients which

2026-09-01 10:19:09 +00:00

test_009_restart.py

Add windows tests to the CI

2026-09-10 06:20:43 +00:00

test_010_eviction.py

Add windows tests to the CI

2026-09-10 06:20:43 +00:00

test_011_authinfo_errors.py

mod_auth_digest: Keep Authentication-Info on error responses.

2026-09-04 21:09:48 +00:00

test_012_errordoc.py

mod_auth_digest: Fix handling of a request with no per-request record:

2026-10-11 13:29:04 +00:00

test_012_truncated_nonce.py

Add regression test for Digest auth with a truncated nonce:

2026-10-08 21:19:15 +00:00

test_013_proxy_domain.py

mod_auth_digest: Send Digest domain= for a reverse-proxied request:

2026-10-11 13:44:17 +00:00