[Parti-discuss] [PATCH] secure password support

[Antoine Martin]

Hi,

This patch implements secure passwords authentication (I believe - can
someone please check!)

If password is enabled (via the command line switch), the server sends a
challenge packet (with the salt in it) when it receives the "hello" command.
The client must re-send the hello command with the password hashed with
the salt.

The only part that I am not too sure about is the sending of the
challenge packet: at this point, self._protocol is not set, so I used:
proto._sock.send(data)
Which may not be the right thing to do as it does not deal with errors
or short writes... But it felt wrong to add a whole lot of code just to
send ~50 bytes!

Comments welcome.

Antoine

-------------- next part --------------
A non-text attachment was scrubbed...
Name: password-secure.patch
Type: text/x-patch
Size: 6916 bytes
Desc: not available
URL: <http://lists.partiwm.org/pipermail/parti-discuss/attachments/20090614/a2e8a37b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <http://lists.partiwm.org/pipermail/parti-discuss/attachments/20090614/a2e8a37b/attachment.pgp>