Fix SCRAM-*-PLUS mechanism implementation (#11)

Andrzej Wójcik (Tigase) opened 3 years ago

During working on #server-1335, I've found out that here is an issue with SCRAM-*-PLUS mechanism implementation in Jaxmpp-J2SE. The issue is caused by retrieving invalid algorithm name from server certificate which is then used for calculation of a hash used for tls-server-end-point channel binding data.

Related
- Add support for channel bindings (tigase/_server/server-core#1335) Closed

Activities

Andrzej Wójcik (Tigase) commented 3 years ago

I've added support for XEP-0440 to make sure that SCRAM-*-PLUS mechanisms are used properly (when server supports channel binding and client has data for it) and fixed generation of tls-server-end-point binding data.

@bmalkow Please review my changes and fixes.
Bartosz Małkowski commented 3 years ago

Looks good.
Login to comment

Type	Task
Priority	Normal
Assignee	Bartosz Małkowski

Issue Votes (0)

Watchers (0)

Reference

tigase/_libraries/jaxmpp#11