I just checked the most recent (available) vopopmail-5.3.27. 

Here, you inclued CRAM-MD5 support from Krzysztof Dabrowski. This
implementation is broken; it does not confirm with Dan Bernstein's
checkpassword API.

Dan requires: user0password0 or - in case of C/R - user0response0challenge0.

Krzysztof Dabrowski has implemented: user0challenge0response.

This badly breaks the checkpassword interface. Don't promote that.

More infos:


I will provide a patch soon.


Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de/
Wiener Weg 8, 50858 Cologne | T: +49 221 484 4923 | F: ...24

Reply via email to