From: Steinar H. Gunderson <sesse@debian.org>
Date: Sat, 24 Oct 2009 09:09:29 +0000 (+0200)
Subject: Disable Digest auth for now.
X-Git-Url: https://git.sesse.net/?p=pr0n;a=commitdiff_plain;h=0befb073005b4071ecf9ed2b6137ba54d84db987

Disable Digest auth for now.
---

diff --git a/perl/Sesse/pr0n/Common.pm b/perl/Sesse/pr0n/Common.pm
index dc8813c..54ba1d3 100644
--- a/perl/Sesse/pr0n/Common.pm
+++ b/perl/Sesse/pr0n/Common.pm
@@ -338,7 +338,8 @@ sub output_401 {
 	$r->status(401);
 	$r->headers_out->{'www-authenticate'} = 'Basic realm="pr0n.sesse.net"';
 
-	if ($options{'DigestAuth'} // 1) {
+	# Digest auth is disabled for now, due to various client problems.
+	if (0 && ($options{'DigestAuth'} // 1)) {
 		# We make our nonce similar to the scheme of RFC2069 section 2.1.1,
 		# with some changes: We don't care about client IP (these have a nasty
 		# tendency to change from request to request when load-balancing