Commit d689376c authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

digest: append the timer to the random for the nonce

parent 98b0d66e

lib/http_digest.c

+5 −2
Original line number Diff line number Diff line
@@ -375,8 +375,11 @@ CURLcode Curl_output_digest(struct connectdata *conn, 
    d->nc = 1;



  if(!d->cnonce) {

    snprintf(cnoncebuf, sizeof(cnoncebuf), "%08x%08x",

             Curl_rand(data), Curl_rand(data));

    struct timeval now = Curl_tvnow();

    snprintf(cnoncebuf, sizeof(cnoncebuf), "%08x%08x%08x%08x",

             Curl_rand(data), Curl_rand(data),

             (unsigned int)now.tv_sec,

             (unsigned int)now.tv_usec);



    rc = Curl_base64_encode(data, cnoncebuf, strlen(cnoncebuf),

                            &cnonce, &cnonce_sz);