Re: Cyrus SASL 2.1.28 testing
Julien ÉLIE <[email protected]> Fri, 19 Nov 2021 20:54:33 +0100
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
Hi Ken, > Wow!=C2=A0 My ages-old INN integration still works. Sure! It dates back to 2004! https://github.com/InterNetNews/inn/blob/main/nnrpd/sasl.c I took care of these last years :-) From time to time, there are little adjustments to do (like gcc=20 warnings or in 2009, a null character was added by sasl_encode64() that=20 Cyrus SASL did not add before - to fix a US-CERT vulnerability; and=20 CVE-2011-0411 affected both STARTTLS and AUTHINFO SASL in INN=20 implementation). Works pretty fine anyway. Not much has changed from your original=20 integration. Thanks again for having provided it. I hope more news clients will=20 implement SASL authentication though (it has not yet been spread amongst=20 news clients, still using legacy AUTHINFO USER with TLS). --=20 Julien =C3=89LIE =C2=AB=C2=A0=E2=80=93 Poussez pas derri=C3=A8re=C2=A0! =E2=80=93 Pas si vite devant=C2=A0!=C2=A0=C2=BB (Ast=C3=A9rix) ------------------------------------------ Cyrus: SASL Permalink: https://cyrus.topicbox.com/groups/sasl/T382d628144c05df6-M6751cc= 226e4aa58825485bc9 Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription