Re: patch DIGEST-MD5 hashed password

[Simon Josefsson]

Hi!  What a coincident that you receive the confirmation just hours
after I ask about it... I got an email from the FSF about it too, so we
can apply the patch now.  Great.

The next step would be for you to crate a patch that works against the
latest git branch, and changing the name of the property as we
discussed.  Check out git using:

 git clone git://git.savannah.gnu.org/gsasl.git

For more information, see:
http://www.gnu.org/software/gsasl/
https://savannah.gnu.org/projects/gsasl/

Please send an updated patch to the list.

Thanks,
/Simon

"Gazsó Attila" <address@hidden> writes:

> Hello Simon!
>
> Good news: I got the PDF from the assignment. What's next?
>
> Attila
>
> On Thu, Oct 2, 2008 at 8:24 PM, Simon Josefsson <address@hidden> wrote:
>> Hi!  Thank you.  I guess the process is slow...
>>
>> /Simon
>>
>> On Thu, 2008-10-02 at 19:02 +0200, Gazsó Attila wrote:
>>> Hello Simon!
>>>
>>> I sent back the signed papers, waiting for a digital copy to acknowledge it.
>>> Regards,
>>>
>>> Attila
>>>
>>> On Thu, Oct 2, 2008 at 6:27 PM, Simon Josefsson <address@hidden> wrote:
>>> > Hi Attila!  Any news on the assignment, have you heard anything from the
>>> > FSF?
>>> >
>>> > Thanks,
>>> > /Simon
>>> >
>>> > "Gazsó Attila" <address@hidden> writes:
>>> >
>>> >> Hello Simon,
>>> >>
>>> >> I sent the copyright assingment.
>>> >>
>>> >> Concerning the property name, I didn't think about it too much, just
>>> >> wanted the patch done asap. But I think
>>> >> GSASL_HASHED_DIGEST_MD5_PASSWORD is a good name.
>>> >>
>>> >> Attila
>>> >>
>>> >> On Tue, Sep 2, 2008 at 1:14 PM, Simon Josefsson <address@hidden> wrote:
>>> >>> "Gazsó Attila" <address@hidden> writes:
>>> >>>
>>> >>>> Hello,
>>> >>>>
>>> >>>> I am writing a jabber server and using the GNU SASL library for
>>> >>>> authentication. I didn't want to store plaintext passwords, so I
>>> >>>> created a patch for 0.2.28. I downloaded the tar.gz because I could
>>> >>>> not compile the git repository version because of version dependencies
>>> >>>> to the gettext package.
>>> >>>>
>>> >>>> This patch essentialy add a new callback type (GSASL_HPASSWORD) which
>>> >>>> contains H(username,':',realm,':',password) as a hex string. It can be
>>> >>>> conveniently stored in that form in a flat file or a database, that's
>>> >>>> why I chose this form. Furthermore I added three helper functions to
>>> >>>> digest-md/server.c to make the hex/binary conversion.
>>> >>>>
>>> >>>> I hope that this patch will appear soon in the library, because I
>>> >>>> would like to use it on production servers too.
>>> >>>
>>> >>> Hello Attila!  I like the idea.  I think the property should be called
>>> >>> GSASL_HASHED_DIGEST_MD5_PASSWORD instead though, since other mechanism
>>> >>> may use different hashed passwords.
>>> >>>
>>> >>> To be able to include your patch, we need a copyright assignment for it.
>>> >>> I'll send it to you separately.
>>> >>>
>>> >>> Thanks,
>>> >>> Simon
>>> >>>
>>> >
>>
>>