Re: Inquiry Regarding OpenSSL 3.0 Support for Cyrus Sasl - 2.1.28

The PASSDSS plugin can probably just go away.=C2=A0 IIRC, it was based on a=
=20
draft spec, and I doubt it gets any use in the real world.


On 12/14/23 11:13 AM, Jered Floyd wrote:
> On the passdss plugin, it looks like Fedora/RHEL do not build and ship th=
is plugin, so nobody here has yet patched it for OpenSSL 3.  I imagine it w=
on't be a big change if you familiarize yourself with the API changes.
>
> --Jered
>
> ----- On Dec 11, 2023, at 6:15 AM, Howard Chu [email protected] wrote:
>
>> madhu.krishna.gundelli via SASL wrote:
>>> Hi Jered,
>>>
>>> Thank you for your prompt response and the valuable information provide=
d. I have
>>> thoroughly examined the suggested source repository and the specific co=
mmit you
>>> mentioned:
>>> https://src.fedoraproject.org/rpms/cyrus-sasl/c/84a6dfd794269883983287d=
5c7c764175a10b76f?branch=3Drawhide
>>>=20=20=20
>>>
>>> Upon closer inspection, I observed that the OpenSSL 3.0 code changes are
>>> primarily concentrated in the following files:
>>>
>>>   1. plugins/digestmd5.c
>>>   2. configure.ac
>>>   3. cyrus-sasl.spec
>>>
>>> Additionally, in the course of my investigation, I identified deprecate=
d APIs in
>>> the following files:
>>>
>>>   1. ./plugins/srp.c
>>>        * HMAC_CTX_free
>>>        * HMAC_CTX_new
>>>        * HMAC_Init_ex
>>>        * HMAC_Update
>>>        * HMAC_Final
>> The above was fixed in eb77d5baf156e7609c9add92834864b37d3c7fb4 in git m=
aster.
>>
>>>   2. ./plugins/passdss.c
>>>        * DSA_new
>>>        * DSA_free
>>>        * DH_size
>>>        * DH_compute_key
>>>        * DSA_do_verify
>>>        * HMAC_Init_ex
>>>        * HMAC_Update
>>>        * HMAC_Final
>>>        * DH_new
>>>        * DH_generate_key
>>>        * DSA_generate_key
>>>        * DSA_do_sign
>> Looks like none of the above has been addressed yet. You're welcome to s=
ubmit a
>> patch to fix it.
>>
>>>   3. ./plugins/ntlm.c
>>>        * HMAC_CTX_new
>>>        * HMAC_CTX_reset
>>>        * HMAC_Init_ex
>>>        * HMAC_Update
>>>        * HMAC_Final
>>>        * HMAC_CTX_free
>>>        * DES_set_odd_parity
>>>        * DES_set_key
>>>        * DES_ecb_encrypt
>> NTLM is obsolete and should not be used any more. It has already been de=
leted
>> from git master. Patches to update the code to support OpenSSL 3 will be
>> ignored.
>>> Moreover, during the integration process for the above files, I encount=
ered an
>>> error related to an undefined symbol. This issue arises because these A=
PIs are
>>> deprecated in OpenSSL 3.0.
>>>
>>>=20=20=20
>>>
>>> Given these findings, I would like to seek your guidance on the next st=
eps.
>>> Specifically, do you have any insights or recommendations regarding the
>>> resolution
>>> of the undefined symbol issue?
>>>=20=20=20
>>>
>>> I appreciate your continued assistance and look forward to your insight=
s.
>>>
>>>=20=20=20
>>>
>>> Regards,
>>>
>>> Madhu Krishna
>>>
>>>
>>> *Cyrus <https://cyrus.topicbox.com/latest>* / SASL / see discussions
>>> <https://cyrus.topicbox.com/groups/sasl> + participants
>>> <https://cyrus.topicbox.com/groups/sasl/members> + delivery=C2=A0options
>>> <https://cyrus.topicbox.com/groups/sasl/subscription> Permalink
>>> <https://cyrus.topicbox.com/groups/sasl/Tad69cbe9ba6e179a-M322274f03348=
540d9597c814>
>>
>> --
>> -- Howard Chu
>> CTO, Symas Corp.           http://www.symas.com
>> Director, Highland Sun     http://highlandsun.com/hyc/
>> Chief Architect, OpenLDAP  http://www.openldap.org/project/
> ------------------------------------------
> Cyrus: SASL
> Permalink: https://cyrus.topicbox.com/groups/sasl/Tad69cbe9ba6e179a-M328b=
e2404b02dd771ea2915b
> Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription

--=20
Kenneth Murchison
Senior Software Developer
Fastmail US LLC


------------------------------------------
Cyrus: SASL
Permalink: https://cyrus.topicbox.com/groups/sasl/Tad69cbe9ba6e179a-Me9f86e=
db4fbd91a7ff52cf68
Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription