Comparison

util/sasl/scram.lua @ 12596:78f874441e21

util.sasl.scram: Add 'tls-exporter' as recognised channel binding method The last missing piece of #1760, otherwise SCRAM-SHA-*-PLUS is not actually advertised.
author Kim Alvefur <zash@zash.se>
date Wed, 27 Jul 2022 00:32:04 +0200
parent 12128:593e823566e1
child 12941:e77c607e8da8
comparison
equal deleted inserted replaced
12595:0572b6e604a3 12596:78f874441e21
238 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db)); 238 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db));
239 239
240 -- register channel binding equivalent 240 -- register channel binding equivalent
241 registerMechanism("SCRAM-"..hash_name.."-PLUS", 241 registerMechanism("SCRAM-"..hash_name.."-PLUS",
242 {"plain", "scram_"..(hashprep(hash_name))}, 242 {"plain", "scram_"..(hashprep(hash_name))},
243 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db, true), {"tls-unique"}); 243 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db, true), {"tls-unique", "tls-exporter"});
244 end 244 end
245 245
246 registerSCRAMMechanism("SHA-1", hashes.sha1, hashes.hmac_sha1, hashes.pbkdf2_hmac_sha1); 246 registerSCRAMMechanism("SHA-1", hashes.sha1, hashes.hmac_sha1, hashes.pbkdf2_hmac_sha1);
247 registerSCRAMMechanism("SHA-256", hashes.sha256, hashes.hmac_sha256, hashes.pbkdf2_hmac_sha256); 247 registerSCRAMMechanism("SHA-256", hashes.sha256, hashes.hmac_sha256, hashes.pbkdf2_hmac_sha256);
248 end 248 end