id summary reporter owner description type status priority milestone component version resolution keywords cc irc_client os os_version 362 sasl_get_part() does not handle spaces correctly root@… "When given a decoded base64 string with spaces during the authentication phase for XMPP, sasl_get_part() doesn't take into account that spaces may exist after commas in the data string. Thus, the digest-md5 mechanism fails because sasl_get_part() won't find what it needs in the string. Example: jabberd2 will give a base64-encoded string of something like the following when asked to provide a challenge for digest-md5: realm=""quadpoint.org"", nonce=""NPotlQpQf9RNYodOwierkQ=="", qop=""auth, auth-int"", charset=utf-8, algorithm=md5-sess A patch to fix this issue is attached. However, it only handles spaces after the commas, when it really should handle spaces anywhere outside of the double-quote-delimited strings. Consider it a temporary solution." defect closed normal Jabber 1.1.1dev fixed sasl jabber digest-md5 nonce Client-independent Public server