From c69064b33689bc65ea081713ac67b7a5ff3d7e6f Mon Sep 17 00:00:00 2001
From: Oleg Kalnichevski <olegk@apache.org>
Date: Wed, 8 Oct 2014 14:42:23 +0000
Subject: [PATCH] HTTPCLIENT-1560: Request mutual auth in WinHttpClient
 Contributed by Michael Osipov <michaelo at apache.org>

Removed ISC_REQ_CONNECTION because it is already set
by default. Added ISC_REQ_MUTUAL_AUTH which is also
required by ISC_REQ_DELEGATE.

git-svn-id: https://svn.apache.org/repos/asf/httpcomponents/httpclient/trunk@1630125 13f79535-47bb-0310-9956-ffa450edef68
---
 .../org/apache/http/impl/auth/win/WindowsNegotiateScheme.java   | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/httpclient-win/src/main/java/org/apache/http/impl/auth/win/WindowsNegotiateScheme.java b/httpclient-win/src/main/java/org/apache/http/impl/auth/win/WindowsNegotiateScheme.java
index 5b3c7b84e..cd5575cb6 100644
--- a/httpclient-win/src/main/java/org/apache/http/impl/auth/win/WindowsNegotiateScheme.java
+++ b/httpclient-win/src/main/java/org/apache/http/impl/auth/win/WindowsNegotiateScheme.java
@@ -275,7 +275,7 @@ String getToken(
 
         sppicontext = new CtxtHandle();
         final int rc = Secur32.INSTANCE.InitializeSecurityContext(clientCred,
-                continueCtx, targetName, Sspi.ISC_REQ_CONNECTION | Sspi.ISC_REQ_DELEGATE, 0,
+                continueCtx, targetName, Sspi.ISC_REQ_DELEGATE | Sspi.ISC_REQ_MUTUAL_AUTH, 0,
                 Sspi.SECURITY_NATIVE_DREP, continueToken, 0, sppicontext, token,
                 attr, null);
         switch (rc) {