mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-04 21:57:45 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_auth_internal_hashed: Coverting salted password to stored_key and server_key.

Browse source
This commit is contained in:
Tobias Markmann 2010-06-08 15:02:53 +02:00
parent 392a5dc56c
commit 9cbe1a3742
1 changed files with 17 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

19
plugins/mod_auth_internal_hashed.lua
View file

@ -22,6 +22,10 @@ local new_sasl = require "util.sasl".new;
local nodeprep = require "util.encodings".stringprep.nodeprep;
local hosts = hosts;
-- TODO: remove these two lines in near future
local hmac_sha1 = require "util.hmac".sha1;
local sha1 = require "util.hashes".sha1;
local prosody = _G.prosody;
local is_cyrus = usermanager.is_cyrus;
@ -53,9 +57,20 @@ function new_hashpass_provider(host)
return nil, "Auth failed. Stored salt and iteration count information is not complete.";
end
if credentials.saltedPasswordSHA1
local valid, stored_key, server_key
if credentials.hexpass then
-- convert hexpass to stored_key and server_key
-- TODO: remove this in near future
valid = true;
local salted_password = credentials.hexpass:gsub("..", function(x) return string.char(tonumber(x, 16)); end);
stored_key = sha1(hmac_sha1(salted_password, "Client Key"))
server_key = hmac_sha1(salted_password, "Server Key");
else
valid, stored_key, server_key = getAuthenticationDatabaseSHA1(password, credentials.salt, credentials.iteration_count);
end
local valid, stored_key, server_key = getAuthenticationDatabaseSHA1(password, credentials.salt, credentials.iteration_count);
local stored_key_hex = stored_key:gsub(".", function (c) return ("%02x"):format(c:byte()); end);
local server_key_hex = server_key:gsub(".", function (c) return ("%02x"):format(c:byte()); end);