Re: Cyrus SASL 2.1.28 testing

Julien ÉLIE <[email protected]> Fri, 19 Nov 2021 20:54:33 +0100
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]>
Hi Ken,

> Wow!=C2=A0 My ages-old INN integration still works.

Sure!  It dates back to 2004!
   https://github.com/InterNetNews/inn/blob/main/nnrpd/sasl.c

I took care of these last years :-)

 From time to time, there are little adjustments to do (like gcc=20
warnings or in 2009, a null character was added by sasl_encode64() that=20
Cyrus SASL did not add before - to fix a US-CERT vulnerability; and=20
CVE-2011-0411 affected both STARTTLS and AUTHINFO SASL in INN=20
implementation).
Works pretty fine anyway.  Not much has changed from your original=20
integration.

Thanks again for having provided it.  I hope more news clients will=20
implement SASL authentication though (it has not yet been spread amongst=20
news clients, still using legacy AUTHINFO USER with TLS).

--=20
Julien =C3=89LIE

=C2=AB=C2=A0=E2=80=93 Poussez pas derri=C3=A8re=C2=A0!
   =E2=80=93 Pas si vite devant=C2=A0!=C2=A0=C2=BB (Ast=C3=A9rix)

------------------------------------------
Cyrus: SASL
Permalink: https://cyrus.topicbox.com/groups/sasl/T382d628144c05df6-M6751cc=
226e4aa58825485bc9
Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription