Re: patch DIGEST-MD5 hashed password

[Gazsó Attila]

Hello Simon!

I'm sending the patch to the latest git branch. I also changed the
field name in Gsasl_session from hpassword to
hashed_digest_md5_password. Otherwise the code is unchanged since the
latest patch.
I also tested it.

Attila

On Thu, Oct 2, 2008 at 10:02 PM, Simon Josefsson <address@hidden> wrote:
> Hi!  What a coincident that you receive the confirmation just hours
> after I ask about it... I got an email from the FSF about it too, so we
> can apply the patch now.  Great.
>
> The next step would be for you to crate a patch that works against the
> latest git branch, and changing the name of the property as we
> discussed.  Check out git using:
>
>  git clone git://git.savannah.gnu.org/gsasl.git
>
> For more information, see:
> http://www.gnu.org/software/gsasl/
> https://savannah.gnu.org/projects/gsasl/
>
> Please send an updated patch to the list.
>
> Thanks,
> /Simon
>
> "Gazsó Attila" <address@hidden> writes:
>
>> Hello Simon!
>>
>> Good news: I got the PDF from the assignment. What's next?
>>
>> Attila
>>
>> On Thu, Oct 2, 2008 at 8:24 PM, Simon Josefsson <address@hidden> wrote:
>>> Hi!  Thank you.  I guess the process is slow...
>>>
>>> /Simon
>>>
>>> On Thu, 2008-10-02 at 19:02 +0200, Gazsó Attila wrote:
>>>> Hello Simon!
>>>>
>>>> I sent back the signed papers, waiting for a digital copy to acknowledge 
>>>> it.
>>>> Regards,
>>>>
>>>> Attila
>>>>
>>>> On Thu, Oct 2, 2008 at 6:27 PM, Simon Josefsson <address@hidden> wrote:
>>>> > Hi Attila!  Any news on the assignment, have you heard anything from the
>>>> > FSF?
>>>> >
>>>> > Thanks,
>>>> > /Simon
>>>> >
>>>> > "Gazsó Attila" <address@hidden> writes:
>>>> >
>>>> >> Hello Simon,
>>>> >>
>>>> >> I sent the copyright assingment.
>>>> >>
>>>> >> Concerning the property name, I didn't think about it too much, just
>>>> >> wanted the patch done asap. But I think
>>>> >> GSASL_HASHED_DIGEST_MD5_PASSWORD is a good name.
>>>> >>
>>>> >> Attila
>>>> >>
>>>> >> On Tue, Sep 2, 2008 at 1:14 PM, Simon Josefsson <address@hidden> wrote:
>>>> >>> "Gazsó Attila" <address@hidden> writes:
>>>> >>>
>>>> >>>> Hello,
>>>> >>>>
>>>> >>>> I am writing a jabber server and using the GNU SASL library for
>>>> >>>> authentication. I didn't want to store plaintext passwords, so I
>>>> >>>> created a patch for 0.2.28. I downloaded the tar.gz because I could
>>>> >>>> not compile the git repository version because of version dependencies
>>>> >>>> to the gettext package.
>>>> >>>>
>>>> >>>> This patch essentialy add a new callback type (GSASL_HPASSWORD) which
>>>> >>>> contains H(username,':',realm,':',password) as a hex string. It can be
>>>> >>>> conveniently stored in that form in a flat file or a database, that's
>>>> >>>> why I chose this form. Furthermore I added three helper functions to
>>>> >>>> digest-md/server.c to make the hex/binary conversion.
>>>> >>>>
>>>> >>>> I hope that this patch will appear soon in the library, because I
>>>> >>>> would like to use it on production servers too.
>>>> >>>
>>>> >>> Hello Attila!  I like the idea.  I think the property should be called
>>>> >>> GSASL_HASHED_DIGEST_MD5_PASSWORD instead though, since other mechanism
>>>> >>> may use different hashed passwords.
>>>> >>>
>>>> >>> To be able to include your patch, we need a copyright assignment for 
>>>> >>> it.
>>>> >>> I'll send it to you separately.
>>>> >>>
>>>> >>> Thanks,
>>>> >>> Simon
>>>> >>>
>>>> >
>>>
>>>
>

libgsasl-DIGEST_MD5_HASHED_PASSWORD.diff
Description: Binary data