Software /
code /
prosody
Comparison
util/sasl/scram.lua @ 12596:78f874441e21
util.sasl.scram: Add 'tls-exporter' as recognised channel binding method
The last missing piece of #1760, otherwise SCRAM-SHA-*-PLUS is not
actually advertised.
author | Kim Alvefur <zash@zash.se> |
---|---|
date | Wed, 27 Jul 2022 00:32:04 +0200 |
parent | 12128:593e823566e1 |
child | 12941:e77c607e8da8 |
comparison
equal
deleted
inserted
replaced
12595:0572b6e604a3 | 12596:78f874441e21 |
---|---|
238 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db)); | 238 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db)); |
239 | 239 |
240 -- register channel binding equivalent | 240 -- register channel binding equivalent |
241 registerMechanism("SCRAM-"..hash_name.."-PLUS", | 241 registerMechanism("SCRAM-"..hash_name.."-PLUS", |
242 {"plain", "scram_"..(hashprep(hash_name))}, | 242 {"plain", "scram_"..(hashprep(hash_name))}, |
243 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db, true), {"tls-unique"}); | 243 scram_gen(hash_name:lower(), hash, hmac_hash, get_auth_db, true), {"tls-unique", "tls-exporter"}); |
244 end | 244 end |
245 | 245 |
246 registerSCRAMMechanism("SHA-1", hashes.sha1, hashes.hmac_sha1, hashes.pbkdf2_hmac_sha1); | 246 registerSCRAMMechanism("SHA-1", hashes.sha1, hashes.hmac_sha1, hashes.pbkdf2_hmac_sha1); |
247 registerSCRAMMechanism("SHA-256", hashes.sha256, hashes.hmac_sha256, hashes.pbkdf2_hmac_sha256); | 247 registerSCRAMMechanism("SHA-256", hashes.sha256, hashes.hmac_sha256, hashes.pbkdf2_hmac_sha256); |
248 end | 248 end |