This project has moved and is read-only. For the latest updates, please go here.
1

Closed

TIdSASLDigest.StartAuthentication() does not parse Challenge correctly

description

When TIdSASLDigest.StartAuthentication() parses the following challenge:realm="microsof-db482b",nonce="fTYdQPacyyiX1BlHyMW8N8rubUqMhEhgj5zGNkYo",qop="auth",charset=utf-8,algorithm=md5-sessEvery odd-indexed value is not unquoted correctly when split into a local TStringList, resulting in the following data that is then used to calculate an incorrect response:realm="microsof-db482b"nonce=fTYdQPacyyiX1BlHyMW8N8rubUqMhEhgj5zGNkYoqop="auth"charset=utf-8algorithm=md5-sessIt should be splitting the values into the TStringList like this instead:realm=microsof-db482bnonce=fTYdQPacyyiX1BlHyMW8N8rubUqMhEhgj5zGNkYoqop=authcharset=utf-8algorithm=md5-sess
Closed Apr 6 at 2:08 AM by gambit47

comments

gambit47 wrote Jan 6, 2013 at 10:00 PM

Fixed in rev 4909.

wrote Feb 13, 2013 at 11:09 PM

wrote May 16, 2013 at 6:14 AM

wrote May 16, 2013 at 6:14 AM

wrote Jun 14, 2013 at 8:50 AM

wrote Apr 6 at 2:08 AM