Dmitry Podgorny
10656ead46
Introduced PRNG based on Hash_DRBG (NIST SP 800-90A)
...
This pseudo-random number generator solves problem with
platform-independent generation of randomized nonces.
Current implementation uses weak entropy, especially when
kernel.randomize_va_space = 0. But it can be improved by
adding new sources to xmpp_rand_reseed().
New internal API introduced:
xmpp_rand_new
xmpp_rand_free
xmpp_rand
xmpp_rand_bytes
xmpp_rand_nonce
2015-10-07 19:35:42 +03:00
James Booth
7cdef1e319
Check for name element when reading mechanisms
...
Fixes an issue where the server sends whitespace between
elements, a segfault would occur when performing a strcmp
on the name.
2015-08-03 23:05:04 +01:00
James Booth
154b70ed2c
Merge remote-tracking branch 'cwtitan/namespace'
2015-03-26 20:44:10 +00:00
Codewalker
86f913b001
Fix use of snprintf (which does not exist on all platforms) in auth.c
...
by replacing it with xmpp_snprintf in order to be consistent with the
rest of the code. Also fixes compile error on MSVC.
2015-01-02 20:21:59 +02:00
Codewalker
e2f1c1e94a
Add XML namespace support.
2014-12-28 22:46:16 -06:00
Dmitry Podgorny
3b906f6ceb
XEP-0114: minor fixes to auth.c
...
- src/sha1.c is used instead of openssl;
- xmpp_alloc/free should be used instead of malloc/free;
- coding style fixes.
2014-12-15 14:42:50 +02:00
Milan Kubík
5d76e052ec
XEP-0114: external component authentication
...
New API xmpp_connect_component() introduced.
2014-12-15 14:41:18 +02:00
Dariusz Dwornikowski
71f75b2e2e
Closes #31
2014-10-23 08:44:52 +02:00
Dmitry Podgorny
db14f2bd4a
auth: fixed memory leaks in _handle_scram_sha1_challenge()
2014-09-09 22:55:23 +03:00
Vitaly Takmazov
58613ea7f3
fix MSVC build
2014-09-08 13:41:30 +03:00
Dmitry Podgorny
ea719cd02a
SCRAM-SHA-1 authentication mechanism support
2014-08-31 00:44:08 +03:00
Dmitry Podgorny
cf361d35fe
auth: removed useless static declaration
...
_handle_open_tls() declared as static function but not defined.
2014-08-26 14:53:15 +03:00
Damian Obernikowicz
783bad0897
Fixed memory leak
2014-08-20 00:36:59 +03:00
James Booth
a572d055a8
Fixed wrong flag setting
2012-05-20 02:10:19 +01:00
James Booth
9615a55856
Added option to disable TLS
...
The connection object includes a tls_support flag, which can
be disabled with xmpp_conn_disable_tls().
2012-05-20 01:50:32 +01:00
Jack Moffitt
ee8afdb64e
Memory leak fixes from @elisamanfrin.
...
Fixes issue #4 .
2012-02-07 22:46:38 -07:00
Dustin Sallings
d048124969
Capture the bound jid.
...
I'd kind of like to be able to discover the JID with full resource for
some operations.
2009-06-15 14:37:21 -07:00
Jack Moffitt
370a371800
Dual licensed libstrophe under MIT and GPLv3.
...
Updated copyright headers.
2009-06-15 15:26:10 -06:00
Jack Moffitt
3fd7515dcf
Abstracted XML parser library and switched to autotools building.
...
expat is still the default parser, but libxml2 can also be used
via an option to the configure script. New parsers can easily be
added by implementing a parser_foo.c that uses the interface defined
in parser.h.
2009-04-14 13:47:20 -06:00
Jack Moffitt
2b8691f154
Documentation changes for SASL ANONYMOUS.
2008-08-24 16:09:31 +00:00
Jack Moffitt
16ad3aabf7
Implement SASL ANONYMOUS authentication.
2008-08-24 16:03:09 +00:00
Jack Moffitt
65a174ee7e
Most public API points are now documented.
2008-06-24 14:43:54 +00:00
Jack Moffitt
b6027cfd7f
Updated copyright years and fixed LLC typo.
2008-06-19 22:33:13 +00:00
James Canete
b63641f7f7
Forgot a bit of a previous commit.
...
Extend features timeout, bind timeout, and legacy timeouts to 15 seconds.
2008-06-19 22:05:31 +00:00
James Canete
d339246a6f
Handle situations where tls doesn't init.
2008-05-14 20:46:35 +00:00
James Canete
dd86aedd19
Force schannel to use RC4 to get around an schannel DES bug.
...
Fix a bug where a failed tls_start would cause a loop.
Moved static variables in schannel into the tls struct.
2007-11-15 03:12:18 +00:00
James Canete
1f453d2ecf
Add schannel support (win32 only)
...
Fix a couple compile warnings.
Extend features timeout to 5 seconds.
2007-11-05 02:30:04 +00:00
James Canete
f45380bb23
Added OpenSSL support.
...
Added win32-specific srv lookup support.
Extend session timeout to 15 seconds.
2007-09-05 20:01:24 +00:00
James Canete
9d25e25002
Fix some bugs with stream errors.
2006-08-28 23:03:42 +00:00
Jack Moffitt
fbb6a6b4c6
Implement stream:error handling.
2006-08-25 19:28:08 +00:00
James Canete
78d2ffc5fb
Fixed session timeout from triggering when session is already established.
2005-10-24 05:30:06 +00:00
Jack Moffitt
b992133987
Implement session establishment, which is required if the server
...
advertises it. Fixes bugs relating to not-authorized errors on
XMPP compliant servers.
2005-10-18 07:58:38 +00:00
Jack Moffitt
033602a4cb
Fixed two bugs. The first bug was that if no stream:features was received,
...
we did not proceed with legacy authentication. The second bug was that
if no resource was specified, legacy authentication must fail, and this
condition was not being detected.
2005-06-28 23:13:59 +00:00
Ralph Giles
1a655d515f
Check for a valid resource to bind before checking its length.
2005-06-15 17:15:43 +00:00
Ralph Giles
76e0c6a4b3
Add the 'libstrophe' name to the copyright headers.
2005-06-15 16:58:11 +00:00
Jack Moffitt
17feefe78a
More minor win32 build fixes. The only linking problem is now expat.lib.
2005-06-14 23:27:58 +00:00
Ralph Giles
d07094c090
Implement binding a specific resource if one has been indicated.
2005-06-14 15:13:46 +00:00
Ralph Giles
f741b68de8
Use the jid utilities in _get_authid().
2005-06-14 14:47:12 +00:00
Ralph Giles
72699eff45
Rename xmpp.h to strophe.h and apply the name changes to the internal
...
header multiple include protection.
2005-06-14 14:25:42 +00:00
Ralph Giles
f27235b862
Move the xmpp library to its new name.
2005-06-14 14:10:31 +00:00
