mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-03 21:27:38 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_saslauth: Fix traceback in tls-server-end-point channel binding

Browse source
This commit is contained in:
Matthew Wild 2023-10-26 14:40:48 +01:00
parent 32ce8884ba
commit 4cd3032523
1 changed files with 8 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

11
plugins/mod_saslauth.lua
View file

@ -280,16 +280,21 @@ local function tls_server_end_point(self)
end
-- Hash function selection, see RFC 5929 §4.1
local hash = hashes.sha256;
local hash, hash_name = hashes.sha256, "sha256";
if cert.getsignaturename then
local sigalg = cert:getsignaturename():lower():match("sha%d+");
if sigalg and sigalg ~= "sha1" and hashes[sigalg] then
-- This should have ruled out MD5 and SHA1
hash = hashes[sigalg];
hash, hash_name = hashes[sigalg], sigalg;
end
end
return hash(pem2der(cert));
local certdata_der = pem2der(cert:pem());
local hashed_der = hash(certdata_der);
module:log("debug", "tls-server-end-point: hex(%s(der)) = %q, hash = %s", hash_name, hex.encode(hashed_der));
return hashed_der;
end
local mechanisms_attr = { xmlns='urn:ietf:params:xml:ns:xmpp-sasl' };