Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Bug in Digest authentication: Request with digest authentication fails if nonce is expired / GIT pull request #40
0 views
Skip to first unread message
stefan lauterbach
Aug 16, 2013, 6:19:51 AM8/16/13
to lib...@perl.org
Hello,
When I used digest authentication in libwww, I came across the issue
that the nonce expiry is not handled correctly, as described in issue
#39 on github (by me). I also found an existing bug report on rt, which
describes the problem even better:
https://rt.cpan.org/Public/Bug/Display.html?id=75908.
I spent a lot of time to understand the module structure and fixed the
issue, I also created tests for it (fixing also some other tests that
were non-operational), and I created pull request #40.
I have not received any response since. As also several other pull
requests are unanswered, the module looks quite unmaintained.
Please have a look at this, I really do not want to bother anyone, but
it is a real problem in a subcase of a central perl library, the fix is
already provided.
I am also ready to give more details and to improve my solution, if you
find any issues with it. However, I would not like to see my efforts
wasted. Please advise me how to proceed.
Thank you.
When I used digest authentication in libwww, I came across the issue
that the nonce expiry is not handled correctly, as described in issue
#39 on github (by me). I also found an existing bug report on rt, which
describes the problem even better:
https://rt.cpan.org/Public/Bug/Display.html?id=75908.
I spent a lot of time to understand the module structure and fixed the
issue, I also created tests for it (fixing also some other tests that
were non-operational), and I created pull request #40.
I have not received any response since. As also several other pull
requests are unanswered, the module looks quite unmaintained.
Please have a look at this, I really do not want to bother anyone, but
it is a real problem in a subcase of a central perl library, the fix is
already provided.
I am also ready to give more details and to improve my solution, if you
find any issues with it. However, I would not like to see my efforts
wasted. Please advise me how to proceed.
Thank you.
Mark Allen
Aug 16, 2013, 12:31:00 PM8/16/13
to s...@pli.de, lib...@perl.org
I know it can be frustrating to wait on an open PR, I've been there, done that.
These are the people who can merge your PR
It looks like Gisle Aas, Matt Trout and Karen Etheridge have permission on PAUSE to release a new
distribution.
It might be worthwhile
to gently nudge one of these people in IRC via irc.perl.org
In the meantime, it sounds like you've patched the problem on your own fork. Using a tool like
Pinto, Stratopan or Carton you could deploy your fork into your environment if you can't wait.
Whether that is a Good Idea or Terribly Impractical depends on a lot of factors unrelated to
getting your PR merged.
Cheers,
Mark
From: stefan lauterbach <s...@pli.de>
To: lib...@perl.org
Sent: Friday, August 16, 2013 5:19 AM
Subject: Bug in Digest authentication: Request with digest authentication fails if nonce is expired / GIT pull request #40
0 new messages