[jdev] ruby xmppd, and Psi
Norman Rasmussen
norman at rasmussen.co.za
Thu Sep 18 09:11:54 CDT 2008
On Thu, Sep 18, 2008 at 4:01 PM, Eric Will <rakaur at malkier.net> wrote:
> I was wrong again. Other clients are sending SOMETHING, I just don't
> know what. It's not an md5 hexdigest. I'm unsure if it's
> base64-encoded, or just random numbers/letters. I've been scanning the
> SASL DIGEST-MD5 RFC and I can't come to a conclusion. I don't think
> cnonce is required to be encoded as anything except as part of the
> 'response'. Perhaps Psi is botching the computation for that.
>
cnonce should be an opaque blob as far as clients are concerned, (my guess
is psi is pulling random bytes and base64 encoding them)
Any chance we can get a log with a known (to us), password?
--
- Norman Rasmussen
- Email: norman at rasmussen.co.za
- Home page: http://norman.rasmussen.co.za/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.jabber.org/jdev/attachments/20080918/6e1a985d/attachment-0002.htm>
More information about the JDev
mailing list