HTTP Sender getting response HTTP/1.1 401 Unauthorized if HTTP Authentication algorithms set to “MD-sess” or “both”

rbeckman-nextgen commented 4 years ago

What is the issue: HTTP Sender getting response HTTP/1.1 401 Unauthorized if HTTP Authentication algorithms set to “MD-sess” {color:red} AND {color} Qop Modes is "undefined" OS(s) /JREs Used: local OSX Yosemite 10.10 with Java 8 Update 51 Issue found /exists in Version(s)/Build(s): mirthconnect-3.4.0.7925.b1883 Steps to Reproduce:

Create Listener Channel with Source Connector =HTTP Listener, port 8890, using Digest Auth (Algorithms = MD5-sess, Qop = undefined), Destination Connector = Channel Writer
Deploy Listener Channel
Create Sender Channel with Source Connector = Channel Reader, Destination Connector = HTTP Sender, port 8890, method POST, Authentication Type = Digest (provide username & password) , Content = $(message.encodedData )
Deploy Sender Channel
Send msg ”test message from HTTP SENDER using DIGEST AUTH” to Sender Channel

Actual Outcome: responseStatusLine = HTTP/1.1 401 Unauthorized responseHeaders = www-authenticate=[Digest nonce="LYe8wPzasFPAXL9s5mdeyXF0eq9p5v4J", realm="QA", opaque="my secret passphrase", domain="/digest/", algorithm="MD5-sess"]}

Expected Outcome: successfully send message

Additional Information: HTTP Sender getting status 401 only when Listener algorithm is set to “MD5-sess” or “both” {color:red} AND {color} Qop Mode is "undefined". Message sent successfully if Qop is defined (auth or auth-int)

Imported Issue. Original Details: Jira Issue Key: MIRTH-3896 Reporter: minht Created: 2016-02-26T13:58:08.000-0800

rbeckman-nextgen commented 4 years ago

Verification of tcpdump found that Digest Authorization is missing "client nonce" value in case of MD5-sess & Qop = undefined

09:24:10.037872 IP (tos 0x0, ttl 64, id 30407, offset 0, flags [DF], proto TCP (6), length 522, bad cksum 0 (->c424)!) ... .gzip,deflate..Authorization:.Digest.username="admin",.realm="QA",.nonce="kkJCOW ESEOtptQHLD7YLcZ+38fn4aDql",.uri="/digest/",.response="4925e6bb6e3a1f399398b54cc 2c1421e",.algorithm=MD5-sess,.opaque="my.secret.passphrase"....test.message.from.HTTP.SENDER.using.DIGEST.AUTH

Imported Comment. Original Details: Author: minht Created: 2016-02-26T14:07:12.000-0800

rbeckman-nextgen commented 4 years ago

Output of tcpdump -vvv -X -s0 -i any port 8890

Imported Comment. Original Details: Author: minht Created: 2016-02-26T14:08:49.000-0800

rbeckman-nextgen commented 4 years ago

Attached test channels (used during MC 3.4.0 testing), see MIRTH-3840

Imported Comment. Original Details: Author: minht Created: 2016-02-26T14:13:25.000-0800

rbeckman-nextgen / test-mc2

HTTP Sender getting response HTTP/1.1 401 Unauthorized if HTTP Authentication algorithms set to “MD-sess” or “both” #3756