1dbdc4f37d
sasl: Add missing length check
...
This could otherwise lead to an integer underflow on specially crafted input.
Signed-off-by: Uli Schlachter <psychon@znc.in >
2013-04-20 21:31:35 +02:00
f161ac6182
Fix memory leak. Oops :(.
...
Found by KindOne on IRC. Thanks!
2013-04-16 17:19:52 -05:00
f578bf9424
Implement DH-AES encrypted password scheme.
...
This is superior to DH-BLOWFISH as Blowfish may suffer from certain
classes of weak keys, which is difficult to mitigate against without
regenerating DH parameters repeatedly. AES also has faced far more
scrutiny and is believed to be more secure.
Reference implementation (services-side):
https://github.com/atheme/atheme/blob/master/modules/saslserv/dh-aes.c
2013-04-16 05:39:10 -05:00
2db7307ac3
Remove unneeded headers.
2013-03-08 01:47:57 +07:00
29d2ff001a
modules/sasl.cpp: Description line for DH-BLOWFISH
...
Added a description to the output for DH-BLOWFISH SASL mechanism.
2013-01-11 21:39:51 -05:00
3a34593359
The same procedure as last year, Miss sophie?
...
Same procedure as every year, James.
2012-12-31 12:44:31 +01:00
50e6c1bfab
Fix dh-blowfish in sasl module and #230
...
Idea for the patch by psychon
2012-09-19 08:38:09 +07:00
892727ba2c
Fix more warnings and #197
2012-08-17 01:16:34 +07:00
67299ebfa8
Fix a bunch of conversion warnings #197
2012-08-14 19:31:14 +07:00
fca5eebe53
Fix presense and help of module arguments.
...
See github issue #192
2012-07-17 09:14:02 +07:00
cab14055de
Merge the sasl module from znc-contrib
2012-05-20 23:47:46 +01:00
Uli Schlachter