[jboss-remoting-issues] [JBoss JIRA] Closed: (JBREM-941) SRP SASL integrity/confidentiality protection is failing

[David Lloyd (JIRA)]

     [ http://jira.jboss.com/jira/browse/JBREM-941?page=all ]

David Lloyd closed JBREM-941.
-----------------------------

    Resolution: Won't Fix

SRP SASL is fatally flawed.  The abandoned draft spec has logical errors in it that I don't see as fixable without basically inventing our own spec.  Switching to SSH seems like the best option at this point.

> SRP SASL integrity/confidentiality protection is failing
> --------------------------------------------------------
>
>                 Key: JBREM-941
>                 URL: http://jira.jboss.com/jira/browse/JBREM-941
>             Project: JBoss Remoting
>          Issue Type: Bug
>      Security Level: Public(Everyone can see) 
>            Reporter: David Lloyd
>             Fix For: 3.1.0.GA
>
>
> See JrppConnection.java (getSaslProperties) - enable the commented-out line and watch SRP blow up.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira