Digest challenge not supported

Advertisement

Vepavani
Joined:
Posts:
1
Location:
Brazil

Digest challenge not supported

Hello
I'm trying to connect by WebDAV protocol in new version 5.21.1, but it's occuring an error.
When I used to connect in 5.19.6 there wasn't any problem

Below a part of log

5.21.1
. 2022-07-19 14:50:43.506 auth: Post-send (#0), code is 401 (want 401), WWW-Authenticate is Digest realm="xxxxxx", nonce="62d6eef35510d"
. 2022-07-19 14:50:43.506 auth: Got challenge (code 401).
. 2022-07-19 14:50:43.506 auth: Got 'Digest' challenge.
. 2022-07-19 14:50:43.506 auth: Trying Digest challenge...
. 2022-07-19 14:50:43.506 auth: No challenges accepted.
. 2022-07-19 14:50:43.506 Request ends, status 401 class 4xx, error line:
. 2022-07-19 14:50:43.506 Could not authenticate to server: legacy Digest challenge not supported
. 2022-07-19 14:50:43.506 Request ends.
. 2022-07-19 14:50:43.506 sess: Destroying session.
. 2022-07-19 14:50:43.506 sess: Closing connection.
. 2022-07-19 14:50:43.506 ssl: Shutdown state: not sent | not received.
. 2022-07-19 14:50:43.506 ssl: Sending closure.
. 2022-07-19 14:50:43.506 sess: Connection closed.
* 2022-07-19 14:50:43.527 (EFatal) Autenticação falhou.
* 2022-07-19 14:50:43.527 Could not authenticate to server: legacy Digest challenge not supported
* 2022-07-19 14:50:43.527 Conexão falhou.
5.19.6
. 2022-07-19 10:21:14.805 ah_post_send (#0), code is 401 (want 401), WWW-Authenticate is Digest realm="xxxxxx", nonce="62d6afca67a53"
. 2022-07-19 10:21:14.805 auth: Got challenge (code 401).
. 2022-07-19 10:21:14.805 auth: Got 'Digest' challenge.
. 2022-07-19 10:21:14.805 auth: Trying Digest challenge...
. 2022-07-19 10:21:14.805 Password prompt
. 2022-07-19 10:21:17.184 auth: H(A1) is [92e5ff06c69f37197db38f508fcddd0a]
. 2022-07-19 10:21:17.184 auth: Accepting digest challenge.
. 2022-07-19 10:21:17.184 auth: Accepted Digest challenge.
. 2022-07-19 10:21:17.184 auth: Sending 'Digest' response.
. 2022-07-19 10:21:17.184 auth: H(A2): 45209fdfa2194d3a36f665fac6935be6
. 2022-07-19 10:21:17.184 Sending request headers:
. 2022-07-19 10:21:17.184 OPTIONS /company/personal/user/2019/disk/path/ HTTP/1.1
. 2022-07-19 10:21:17.184 User-Agent: WinSCP/5.19.6 neon/0.31.2
. 2022-07-19 10:21:17.184 Keep-Alive: 
. 2022-07-19 10:21:17.184 Connection: TE, Keep-Alive
. 2022-07-19 10:21:17.184 TE: trailers
. 2022-07-19 10:21:17.184 Host: xxxxxxxxx
. 2022-07-19 10:21:17.184 Authorization:

image (1).png

Reply with quote

Advertisement

martin
Site Admin
martin avatar
Joined:
Posts:
41,253
Location:
Prague, Czechia

Re: Digest challenge not supported

Thanks for your report.
WinSCP 5.21 indeed does not support legacy RFC 2069 Digest anymore.
What server are you connecting to that still uses it?

Reply with quote

martin
Site Admin
martin avatar
Joined:
Posts:
41,253
Location:
Prague, Czechia

Re: Same problem

That Digest challenge has been obsoleted over 20 years ago:
Disable 2069-style weak Digest auth by default · Issue #23 · notroj/neon
Please ask the server administrator to upgrade it.
Anyway, I've added this issue to the tracker:
Issue 2109 – Restore support for legacy version of the Digest algorithm specified in RFC 2069
If there's sufficient demand, I may try to implement a workaround.

Reply with quote

david.edson
Donor
Joined:
Posts:
2
Location:
Sydney Australia

I am having the same issue, trying to connect to WebDAV server on iPad with Textastic application

Can you please tell me the magic way to 'allow' connections using the advanced RAW settings in WinSCP? I am prepared to accept the security bypass between my owned two nodes.

Reply with quote

Advertisement

martin
Site Admin
martin avatar

Re: I am having the same issue, trying to connect to WebDAV server on iPad with Textastic application

@david.edson: Do you refer to the Bug 2109? It hasn't been implemented yet. Vote for it, if you want it to happen.

Reply with quote

Advertisement

You can post new topics in this forum