Re: Cyrus SASL 2.1.29 testing

--On Sunday, July 30, 2023 1:24 AM +0200 Julien =C3=89LIE=20
<[email protected]> wrote:

> Hi Quanah,
>
> Looking at the changes, #773 (digestmd5: Drop the mechanism) is marked
> for the 2.1.29 release but it seems that it is only in the master branch.

Correct.  We're working on figuring out if the impact would be too large or=
=20
not.  Generally the point of getting 2.1.29 out is to support OpenSSL3,=20
since all other OpenSSL releases will be historic soon.  But OpenSSL3 does=
=20
not support des/rc4 or 3des, which are the only two options with the=20
current DIGEST-MD5 mechanism implmeneted in cyrus-sasl.

So the options are:

a) Remove DIGEST-MD5 support entirely (No one should be using it at this=20
point anyhow)

or

b) Implement AES in the DIGEST-MD5 mechanism.  This would mean it's not=20
backwards compatible with older cyrus-sasl releases DIGEST-MD5 mechanisms,=
=20
so it's questionable if it's worth doing this effort.

Either way, cyurs-sasl 2.1.29 can't work with prior cyrus-sasl releases in=
=20
regards to DIGEST-MD5.

And yes, the preference is for people who need this type of SASL mechanism=
=20
is to use the newer SCRAM varieties.

--Quanah






------------------------------------------
Cyrus: SASL
Permalink: https://cyrus.topicbox.com/groups/sasl/T204776f7816270a8-M2e6b10=
72e24cfb8b6277e976
Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription