[curl/f20] Resolves: #1093348 - auth failure on duplicated 'WWW-Authenticate: Negotiate' header

[Kamil Dudka]

commit cf43f72e3d29d7233c84846798488c1dc3c06611
Author: Kamil Dudka <kdudka at redhat.com>
Date:   Fri May 9 23:43:40 2014 +0200

    Resolves: #1093348 - auth failure on duplicated 'WWW-Authenticate: Negotiate' header

 0010-curl-7.32.0-ec5fde24.patch |   31 +++++++++++++++++++++++++++++++
 curl.spec                       |    5 +++++
 2 files changed, 36 insertions(+), 0 deletions(-)
---
diff --git a/0010-curl-7.32.0-ec5fde24.patch b/0010-curl-7.32.0-ec5fde24.patch
new file mode 100644
index 0000000..5b4c88d
--- /dev/null
+++ b/0010-curl-7.32.0-ec5fde24.patch
@@ -0,0 +1,31 @@
+From c6cecc7bd90e0e89308e8e5c6c590861c00db6f3 Mon Sep 17 00:00:00 2001
+From: Kamil Dudka <kdudka at redhat.com>
+Date: Mon, 5 May 2014 14:49:30 +0200
+Subject: [PATCH] http: avoid auth failure on a duplicated header
+
+... 'WWW-Authenticate: Negotiate' received from server
+
+Reported by: David Woodhouse
+Bug: https://bugzilla.redhat.com/1093348
+
+[upstream commit ec5fde24de5ddd1910730f0cbac5e77820b26eb9]
+---
+ lib/http.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/lib/http.c b/lib/http.c
+index 3f8a4c0..90b37d8 100644
+--- a/lib/http.c
++++ b/lib/http.c
+@@ -745,7 +745,7 @@ CURLcode Curl_http_input_auth(struct connectdata *conn,
+           infof(data, "Authentication problem. Ignoring this.\n");
+           data->state.authproblem = TRUE;
+         }
+-        else {
++        else if(data->state.negotiate.state == GSS_AUTHNONE) {
+           neg = Curl_input_negotiate(conn, (bool)(httpcode == 407), start);
+           if(neg == 0) {
+             DEBUGASSERT(!data->req.newurl);
+-- 
+1.8.3.1
+
diff --git a/curl.spec b/curl.spec
index 3fce62d..ab851cf 100644
--- a/curl.spec
+++ b/curl.spec
@@ -34,6 +34,9 @@ Patch8: 0008-curl-7.32.0-8868a226.patch
 # extend URL parser to support IPv6 zone identifiers (#680996)
 Patch9: 0009-curl-7.32.0-9317eced.patch
 
+# auth failure on duplicated 'WWW-Authenticate: Negotiate' header (#1093348)
+Patch10: 0010-curl-7.32.0-ec5fde24.patch
+
 # patch making libcurl multilib ready
 Patch101: 0101-curl-7.32.0-multilib.patch
 
@@ -155,6 +158,7 @@ documentation of the library, too.
 %patch7 -p1
 %patch8 -p1
 %patch9 -p1
+%patch10 -p1
 
 # Fedora patches
 %patch101 -p1
@@ -278,6 +282,7 @@ rm -rf $RPM_BUILD_ROOT
 %changelog
 * Sat May 10 2014 Kamil Dudka <kdudka at redhat.com> 7.32.0-10
 - extend URL parser to support IPv6 zone identifiers (#680996)
+- auth failure on duplicated 'WWW-Authenticate: Negotiate' header (#1093348)
 
 * Fri Apr 25 2014 Kamil Dudka <kdudka at redhat.com> 7.32.0-9
 - nss: implement non-blocking SSL handshake