Re: svn commit: r1492395 - in /httpd/httpd/trunk: CHANGES modules/aaa/mod_auth_digest.c

2013-06-14 Thread Roy T. Fielding
On Jun 14, 2013, at 2:16 PM, Stefan Fritsch wrote: > On Thursday 13 June 2013, Roy T. Fielding wrote: >> On Jun 12, 2013, at 12:34 PM, s...@apache.org wrote: >>> Author: sf >>> Date: Wed Jun 12 19:34:19 2013 >>> New Revision: 1492395 >>> >>> URL: http://svn.apache.org/r1492395 >>> Log: >>> Actuall

Re: svn commit: r1492395 - in /httpd/httpd/trunk: CHANGES modules/aaa/mod_auth_digest.c

2013-06-14 Thread Stefan Fritsch
On Friday 14 June 2013, Stefan Fritsch wrote: > > Using a global pointer to an allocated pool variable is > > not even remotely safe when that pool gets deallocated. > > And a routine that gets called within .htaccess files is not an > > appropriate place to set a server-wide value. > > It's the p

Re: svn commit: r1492395 - in /httpd/httpd/trunk: CHANGES modules/aaa/mod_auth_digest.c

2013-06-14 Thread Stefan Fritsch
On Thursday 13 June 2013, Roy T. Fielding wrote: > On Jun 12, 2013, at 12:34 PM, s...@apache.org wrote: > > Author: sf > > Date: Wed Jun 12 19:34:19 2013 > > New Revision: 1492395 > > > > URL: http://svn.apache.org/r1492395 > > Log: > > Actually use the secret when generating nonces. > > > > This

Re: svn commit: r1492395 - in /httpd/httpd/trunk: CHANGES modules/aaa/mod_auth_digest.c

2013-06-13 Thread Roy T . Fielding
On Jun 12, 2013, at 12:34 PM, s...@apache.org wrote: > Author: sf > Date: Wed Jun 12 19:34:19 2013 > New Revision: 1492395 > > URL: http://svn.apache.org/r1492395 > Log: > Actually use the secret when generating nonces. > > This change may cause problems if used with round robin load balancers.