title: Android HttpClient Digest Authentication Authorization header "nc" hard-coded
body: <p>We try to send several requests to target server in one HttpClient (one session). The target server will first authenticate all requests with digest authentication (based on MD5-sess). The result shows that only first access is successful. The following accesses are rejected by server because server treats later accesses as replay attack as the "nc" value is always "00000001".</p>
  
  <p>It seems Android HttpClient hard-coded digest authorization header attirbute "nc" to "00000001"? </p>
  
  <p>Any way for client to increase this value when new request is sent? Thanks.</p>
  
  <p>public class HttpService {</p>
  
  <pre><code>private static final HttpService instance = new HttpService();
  private HttpService() {
      client = getHttpClient();
  }
  
  public static HttpService getInstance() {
      return instance;
  }
  
  private DefaultHttpClient getHttpClient() {
      HttpParams params = new BasicHttpParams();
      HttpConnectionParams.setStaleCheckingEnabled(params, false);
      HttpConnectionParams.setConnectionTimeout(params, 15 * 1000);
      HttpConnectionParams.setSoTimeout(params, 15 * 1000);
      HttpConnectionParams.setSocketBufferSize(params, 8192);
      HttpProtocolParams.setUserAgent(params, USER_AGENT);
  
      SchemeRegistry schemeRegistry = new SchemeRegistry();
      Scheme httpScheme = new Scheme("http", PlainSocketFactory.getSocketFactory(), 80);
      Scheme httpsScheme = new Scheme("https", SSLCertificateSocketFactory.getHttpSocketFactory(30 * 1000, null), 443);
      schemeRegistry.register(httpScheme);
      schemeRegistry.register(httpsScheme);
      ClientConnectionManager manager = new ThreadSafeClientConnManager(params, schemeRegistry);
  
      //create client
      DefaultHttpClient httpClient = new DefaultHttpClient(manager, params);
  
      httpClient.getCredentialsProvider().setCredentials(new AuthScope(address, port),
                  new UsernamePasswordCredentials(username, password));
  }
  </code></pre>
  
  <p>}</p>