archive/jdk
1
0
Fork 0
mirror of https://github.com/openjdk/jdk.git synced 2025-08-28 07:14:30 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

6682540: Incorrect SASL DIGEST-MD5 behavior

Browse source 
Reviewed-by: jnimeh
This commit is contained in:
Weijun Wang 2019-05-25 08:30:53 +08:00
parent 2c002e9355
commit 764258a114
2 changed files with 157 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
src/java.security.sasl/share/classes/com/sun/security/sasl/digest/DigestMD5Server.java
View file

@ -1,5 +1,5 @@
/*
* Copyright (c) 2003, 2012, Oracle and/or its affiliates. All rights reserved.
* Copyright (c) 2003, 2019, Oracle and/or its affiliates. All rights reserved.
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
*
* This code is free software; you can redistribute it and/or modify it
@ -195,8 +195,13 @@ final class DigestMD5Server extends DigestMD5Base implements SaslServer {
switch (step) {
case 1:
if (response.length != 0) {
throw new SaslException(
"DIGEST-MD5 must not have an initial response");
// We do not support "subsequent authentication" (client
// initial response). According to
// https://tools.ietf.org/html/rfc2831#section-2.2
// If the server does not support subsequent authentication,
// then it sends a "digest-challenge", and authentication
// proceeds as in initial authentication.
logger.log(Level.FINE, "Ignoring initial response");
}
/* Generate first challenge */