[
https://issues.apache.org/jira/browse/HTTPCLIENT-1560?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14163454#comment-14163454
]
ASF GitHub Bot commented on HTTPCLIENT-1560:
--------------------------------------------
GitHub user michael-o opened a pull request:
https://github.com/apache/httpclient/pull/20
HTTPCLIENT-1560: Request mutual auth in WinHttpClient
Removed ISC_REQ_CONNECTION because it is already set
by default. Added ISC_REQ_MUTUAL_AUTH which is also
required by ISC_REQ_DELEGATE.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/michael-o/httpclient HTTPCLIENT-1560
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/httpclient/pull/20.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #20
----
commit f7916b5d7d5335fd03743041dc3dd3421f52dec4
Author: Michael Osipov <[email protected]>
Date: 2014-10-08T13:03:04Z
HTTPCLIENT-1560: Request mutual auth in WinHttpClient
Removed ISC_REQ_CONNECTION because it is already set
by default. Added ISC_REQ_MUTUAL_AUTH which is also
required by ISC_REQ_DELEGATE.
----
> Request mutual auth in WinHttpClient
> ------------------------------------
>
> Key: HTTPCLIENT-1560
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1560
> Project: HttpComponents HttpClient
> Issue Type: Improvement
> Components: HttpAuth
> Affects Versions: 4.4 Beta1
> Reporter: Michael Osipov
>
> {{WindowsNegotiateScheme}} shall request in [line
> 278|https://github.com/apache/httpclient/blob/trunk/httpclient-win/src/main/java/org/apache/http/impl/auth/win/WindowsNegotiateScheme.java#L278]
> mutual auth ({{ISC_REQ_MUTUAL_AUTH}}) by the server. This adds another layer
> of security when Kerberos is selected.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
