-
Bug
-
Resolution: Done
-
Major
-
None
-
None
The DigestMechanismFactory currently supports the DIGEST, DIGEST-SHA-256, and DIGEST-SHA-512-256 authentication mechanisms.
However, when using the DIGEST-SHA-256 or DIGEST-SHA-512-256 mechanisms, it's not possible to make use of DigestPasswords. Only clear passwords can be used with these mechanisms.
The underlying issue is that DigestAuthenticationMechanism#getH_A1 erroneously sets the credential algorithm for the PasswordDigestObtainer to "digest-md5". The algorithm that should be used depends on the mechanism name.