[Gambas-user] HMAC-MD5 & CRAM-MD5

Tobias Boege taboege at gmail.com
Fri Jun 26 18:01:55 CEST 2020

On Fri, 26 Jun 2020, mtitouinfo--- via User wrote:
> hi Tobias
> :~$ gbs3 -u 'gb.openssl' -e 'Print Base64$(HMac("passwd", "challenge", "MD5"))'MMain.Main.5: #18: No return valueMMain.Main.5 :~$ gbs3 -u 'gb.openssl' -e 'Print Base64$(HMac("passwd", "challenge", "md5"))'MMain.Main.5: #18: No return valueMMain.Main.5 :~$ gbs3 -u 'gb.openssl' -e 'Print Base64$(HMac("passwd", "challenge"))'sbW1+7EULk2FR6c8iJMKcIWUcAc=
> packet broken ?
> :~$ apt show gambas3-gb-openssl Package: gambas3-gb-opensslVersion: 3.14.3+git6015.2a35dde+build5.a086335.13.3ac8a0c~ubuntu16.04.1Priority: optionalSection: libdevelSource: gambas3Maintainer: Sebastian Kulesz <sebikul at gmail.com>Installed-Size: 34,8 kBDepends: libc6 (>= 2.14), libssl1.0.0 (>= 1.0.0)Download-Size: 12,0 kBAPT-Manual-Installed: yesAPT-Sources: http://ppa.launchpad.net/gambas-team/gambas3/ubuntu xenial/main amd64 PackagesDescription: Gambas OpenSSL component
> Bye. Titou.

Too old:

  $ gbs3 -u gb.openssl -e 'Print Base64$(HMac("passwd", "challenge", "MD5"))'
  $ gbs3 --version

The possibility to specify the hash function for the HMac was added
in 3.14.0 but a critical bugfix afterwards has not been released in
a stable Gambas version yet. You would have to wait for 3.15.0 or
use the daily builds [1].

If you want to do neither but can patch your Gambas, the only commit
on top of the 3.14.0 sources that you have to apply to fix this issue
is b76e4001bc119b7e.


[1] https://launchpad.net/~gambas-team/+archive/ubuntu/gambas-daily

"There's an old saying: Don't change anything... ever!" -- Mr. Monk

More information about the User mailing list