Enhance DigestScheme for RFC 7616 Compliance and Expanded Hash Algorithm Support (#597)

* Support RFC 7616 compliance in DigestScheme with extended hash algorithm support and charset

Enhanced DigestScheme to support SHA-256, SHA-512/256,  algorithms in compliance with RFC 7616.
Adjusted cnonce generation for adequate entropy in SHA-256 and SHA-512/256 contexts.

* Increase MD5 cnonce length to 16 bytes for full 128-bit entropy

* Use represent supported algorithms.
2 files changed
tree: 2fda5ab25f68874bbb4a27611578c74a8fe9d0cf
  1. .github/
  2. httpclient5/
  3. httpclient5-cache/
  4. httpclient5-fluent/
  5. httpclient5-testing/
  6. src/
  7. test-CA/
  8. .gitattributes
  9. .gitignore
  10. BUILDING.txt
  11. CODE_OF_CONDUCT.md
  12. doap_HttpComponents_Client.rdf
  13. LICENSE.txt
  14. NOTICE.txt
  15. pom.xml
  16. README.md
  17. RELEASE_NOTES.txt
  18. SECURITY.md
README.md

Apache HttpComponents Client

Welcome to the HttpClient component of the Apache HttpComponents project.

GitHub Actions Status Maven Central License

Building Instructions

For building from source instructions please refer to BUILDING.txt.

Dependencies

HttpClient main module requires Java 8 compatible runtime and depends on the following external libraries:

Other dependencies are optional.

(for detailed information on external dependencies please see pom.xml)

Licensing

Apache HttpComponents Client is licensed under the Apache License 2.0. See the files LICENSE.txt and NOTICE.txt for more information.

Contact

Cryptographic Software Notice

This distribution may include software that has been designed for use with cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See https://www.wassenaar.org/ for more information.

The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code.

The following provides more details on the included software that may be subject to export controls on cryptographic software:

Apache HttpComponents Client interfaces with the Java Secure Socket Extension (JSSE) API to provide

  • HTTPS support

Apache HttpComponents Client does not include any implementation of JSSE.