Skip to content

Server side channel binding verification fails, when server does not support CB but client does. #4639

@niecore

Description

@niecore

MongooseIM: v6.5.0, v6.6.0
fast_scram: v0.7.0

When using auth.sasl_mechanisms with no ciphers that support channel binding (non -PLUS variants), clients that support channel binding (indicated via G2S header y,,) can not authenticate with following error e=channel-bindings-dont-match.

The problem seems to be part of the implementation in fast_scram and a proposed fix has been published here.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions