This project has moved. For the latest updates, please go here.
1

Closed

TIdSASLDigest.StartAuthentication() does not parse Challenge correctly

description

When TIdSASLDigest.StartAuthentication() parses the following challenge:realm="microsof-db482b",nonce="fTYdQPacyyiX1BlHyMW8N8rubUqMhEhgj5zGNkYo",qop="auth",charset=utf-8,algorithm=md5-sessEvery odd-indexed value is not unquoted correctly when split into a local TStringList, resulting in the following data that is then used to calculate an incorrect response:realm="microsof-db482b"nonce=fTYdQPacyyiX1BlHyMW8N8rubUqMhEhgj5zGNkYoqop="auth"charset=utf-8algorithm=md5-sessIt should be splitting the values into the TStringList like this instead:realm=microsof-db482bnonce=fTYdQPacyyiX1BlHyMW8N8rubUqMhEhgj5zGNkYoqop=authcharset=utf-8algorithm=md5-sess
Closed Apr 6 at 1:08 AM by gambit47

comments

gambit47 wrote Jan 6, 2013 at 9:00 PM

Fixed in rev 4909.

wrote Feb 13, 2013 at 10:09 PM

wrote May 16, 2013 at 5:14 AM

wrote May 16, 2013 at 5:14 AM

wrote Jun 14, 2013 at 7:50 AM

wrote Apr 6 at 1:08 AM