Hi,

I just checked the most recent (available) vopopmail-5.3.27. 

Here, you inclued CRAM-MD5 support from Krzysztof Dabrowski. This
implementation is broken; it does not confirm with Dan Bernstein's
checkpassword API.

Dan requires: user0password0 or - in case of C/R - user0response0challenge0.

Krzysztof Dabrowski has implemented: user0challenge0response.

This badly breaks the checkpassword interface. Don't promote that.

More infos:

http://www.fehcom.de/qmail/spamcontrol/README_spamcontrol.html


I will provide a patch soon.

regards.
--eh.

Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de/
Wiener Weg 8, 50858 Cologne | T: +49 221 484 4923 | F: ...24

Reply via email to