[jira] [Commented] (HTTPCLIENT-1542) Caching HttpClient uses absolute URIs for validation

2014-08-18 Thread Joseph Walton (JIRA)
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1542?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14101623#comment-14101623 ] Joseph Walton commented on HTTPCLIENT-1542: --- Thanks; commits faad358e (svn

[jira] [Created] (HTTPCLIENT-1546) Cookie values can end up being double quoted

2014-08-18 Thread Gregory Chanan (JIRA)
Gregory Chanan created HTTPCLIENT-1546: -- Summary: Cookie values can end up being double quoted Key: HTTPCLIENT-1546 URL: https://issues.apache.org/jira/browse/HTTPCLIENT-1546 Project: HttpComponen

CVE-2014-3577: Apache HttpComponents client: Hostname verification susceptible to MITM attack

2014-08-18 Thread Dirk-Willem van Gulik
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Security Advisory - Apache Software Foundation Apache HttpComponents / hc.apache.org Hostname verification susceptible to MITM attack CVE-2014-3577 / CVSS 1.4 Apache HttpComponents (pri

[jira] [Resolved] (HTTPCLIENT-1449) X509HostnameVerifier API is too restrictive

2014-08-18 Thread Oleg Kalnichevski (JIRA)
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1449?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oleg Kalnichevski resolved HTTPCLIENT-1449. --- Resolution: Won't Fix Fix Version/s: (was: 4.4 Alpha1) > X509

[jira] [Reopened] (HTTPCLIENT-1449) X509HostnameVerifier API is too restrictive

2014-08-18 Thread Oleg Kalnichevski (JIRA)
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1449?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oleg Kalnichevski reopened HTTPCLIENT-1449: --- I had to revert these changes and make the new default hostname verification

[jira] [Closed] (HTTPCLIENT-1545) Possible infinite loop when WindowsNegotiateScheme authentication fails

2014-08-18 Thread Ka-Lok Fung (JIRA)
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ka-Lok Fung closed HTTPCLIENT-1545. --- > Possible infinite loop when WindowsNegotiateScheme authentication fails >

[jira] [Commented] (HTTPCLIENT-1542) Caching HttpClient uses absolute URIs for validation

2014-08-18 Thread Oleg Kalnichevski (JIRA)
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1542?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14100458#comment-14100458 ] Oleg Kalnichevski commented on HTTPCLIENT-1542: --- Patch committed. I als

[continuum] BUILD FAILURE: Apache HttpClient Cache - Apache HttpComponents (Default Maven 3 Build Definition)

2014-08-18 Thread Apache Continuum
Online report : https://continuum-ci.apache.org/continuum/buildResult.action?buildId=35858&projectId=310 Build statistics: State: Failed Previous State: Ok Started at: Mon 18 Aug 2014 08:01:26 + Finished at: Mon 18 Aug 2014 08:02:47 + Total time: 1m 21s Build Trigger: Schedule

[continuum] BUILD FAILURE: HttpComponents Client - Apache HttpComponents (Default Maven 3 Build Definition)

2014-08-18 Thread Apache Continuum
Online report : https://continuum-ci.apache.org/continuum/buildResult.action?buildId=35857&projectId=306 Build statistics: State: Failed Previous State: Ok Started at: Mon 18 Aug 2014 08:01:04 + Finished at: Mon 18 Aug 2014 08:01:19 + Total time: 14s Build Trigger: Schedule

[jira] [Resolved] (HTTPCLIENT-1545) Possible infinite loop when WindowsNegotiateScheme authentication fails

2014-08-18 Thread Oleg Kalnichevski (JIRA)
[ https://issues.apache.org/jira/browse/HTTPCLIENT-1545?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Oleg Kalnichevski resolved HTTPCLIENT-1545. --- Resolution: Fixed Fix Version/s: 4.4 Alpha2 Patch committed to SV