[Gambas-user] HMAC-MD5 & CRAM-MD5

[Tobias Boege]

On Fri, 26 Jun 2020, mtitouinfo--- via User wrote:
> hi Tobias
> :~$ gbs3 -u 'gb.openssl' -e 'Print Base64$(HMac("passwd", "challenge", "MD5"))'MMain.Main.5: #18: No return valueMMain.Main.5 :~$ gbs3 -u 'gb.openssl' -e 'Print Base64$(HMac("passwd", "challenge", "md5"))'MMain.Main.5: #18: No return valueMMain.Main.5 :~$ gbs3 -u 'gb.openssl' -e 'Print Base64$(HMac("passwd", "challenge"))'sbW1+7EULk2FR6c8iJMKcIWUcAc=
> packet broken ?
> :~$ apt show gambas3-gb-openssl Package: gambas3-gb-opensslVersion: 3.14.3+git6015.2a35dde+build5.a086335.13.3ac8a0c~ubuntu16.04.1Priority: optionalSection: libdevelSource: gambas3Maintainer: Sebastian Kulesz <sebikul at gmail.com>Installed-Size: 34,8 kBDepends: libc6 (>= 2.14), libssl1.0.0 (>= 1.0.0)Download-Size: 12,0 kBAPT-Manual-Installed: yesAPT-Sources: http://ppa.launchpad.net/gambas-team/gambas3/ubuntu xenial/main amd64 PackagesDescription: Gambas OpenSSL component
> Bye. Titou.
>    

Too old:

  $ gbs3 -u gb.openssl -e 'Print Base64$(HMac("passwd", "challenge", "MD5"))'
  FaMyMCJdxjKw3+gJd96a+g==
  $ gbs3 --version
  3.14.90

The possibility to specify the hash function for the HMac was added
in 3.14.0 but a critical bugfix afterwards has not been released in
a stable Gambas version yet. You would have to wait for 3.15.0 or
use the daily builds [1].

If you want to do neither but can patch your Gambas, the only commit
on top of the 3.14.0 sources that you have to apply to fix this issue
is b76e4001bc119b7e.

Regards,
Tobias

[1] https://launchpad.net/~gambas-team/+archive/ubuntu/gambas-daily

-- 
"There's an old saying: Don't change anything... ever!" -- Mr. Monk