Remove SCRAM-related variables on IRCServer object when we see

server-final-message (sasl.py)
This commit is contained in:
jesopo 2019-02-05 12:53:19 +00:00
parent d68c73affa
commit d4503fdf28

View file

@ -114,6 +114,10 @@ class Module(ModuleManager.BaseModule):
server_signature = hmac.digest(server_key, auth_message, server_signature = hmac.digest(server_key, auth_message,
algo) algo)
del event["server"]._scram_first
del event["server"]._scram_salted_password
del event["server"]._scram_auth_message
if server_signature != base64.b64decode(verifier): if server_signature != base64.b64decode(verifier):
raise ValueError("SCRAM %s authentication failed " raise ValueError("SCRAM %s authentication failed "
% algo) % algo)