cram-auth-0.1/ 40750 1751 0 0 7517230323 11545 5ustar jameswheelcram-auth-0.1/README100644 1751 1751 3027 7517225516 12632 0ustar jamesjames This program produces CRAM-MD5 authentication responses as used in SASL (e.g. SMTP AUTH). Supply the server's challenge string(s) (or 'q' to quit) at the ``Server challenge: '' prompt. The program decodes the challenge then encodes a response using the $user and $secret variables -- DON'T FORGET TO SET THEM! Supply the response to the SMTP server. $Id: README,v 1.1 2002/07/23 10:09:18 james Exp $ Copyright (c) 2002 James Raftery . All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. Please submit bug reports, patches and comments to the author. The script that does the work is auth.pl -- it requires perl with the Digest::HMAC_MD5 and MIME::Base64 modules. You can download them from http://search.cpan.org/ if you need them. Copy auth.pl to a convenient location (a directory in your $PATH is a good choice), or run it from where you extracted the tar archive. A sample session looks like: (Text preceeded by > is sent by the server, < is sent by the client) > 220 foo.bar.com ESMTP NO UCE < EHLO localhost > 250-foo.bar.com > 250-ATRN > 250-AUTH CRAM-MD5 > 250 AUTH=CRAM-MD5 < AUTH CRAM-MD5 > 334 PDY1MDIxLjEwMjYxMzMwNDJAZm9vLmJhci5jb20+ < cG9zdG1hc3RlckBhbnl3aGVyZS5pZSA0YmZmMWNkMzA0MGI2MmQ3MjQzMmI4YjRiN2JiNzRjYw== > 235 Authentication successful. < QUIT > 221 Goodbye. In auth.pl, look for the section starting ``MODIFY THESE VALUES!'' and set the $user and $secret variables. e.g. my $user = 'postmaster@example.org'; my $secret = 'Secret'; cram-auth-0.1/auth.pl100755 1751 1751 4161 7517221375 13252 0ustar jamesjames#!/usr/bin/perl -w use strict; # Pick up any modules you need from http://search.cpan.org/ use Digest::HMAC_MD5 qw(hmac_md5_hex); use MIME::Base64; # # Copyright (c) 2002 James Raftery . All rights reserved. # This program is free software; you can redistribute it and/or # modify it under the same terms as Perl itself. # Please submit bug reports, patches and comments to the author. # # $Id: auth.pl,v 1.2 2002/07/23 09:33:49 james Exp $ # # This program produces CRAM-MD5 authentication responses as used in # SASL (e.g. SMTP AUTH). Supply the server's challenge string(s) or 'q' # to quit. The program decodes the challenge then encodes a response # using the $user and $secret variables -- DON'T FORGET TO SET THEM! # Supply the response to the SMTP server. Sample session: # # > 220 foo.bar.com ESMTP NO UCE # < EHLO localhost # > 250-foo.bar.com # > 250-ATRN # > 250-AUTH CRAM-MD5 # > 250 AUTH=CRAM-MD5 # < AUTH CRAM-MD5 # > 334 PDY1MDIxLjEwMjYxMzMwNDJAZm9vLmJhci5jb20+ # < cG9zdG1hc3RlckBhbnl3aGVyZS5pZSA0YmZmMWNkMzA0MGI2MmQ3MjQzMmI4YjRiN2JiNzRjYw== # > 235 Authentication successful. # < QUIT # > 221 Goodbye. # # # MODIFY THESE VALUES! # # Your username # my $user = 'postmaster@example.org'; # # Your shared secret # my $secret = 'Secret'; # # You're done. No more to edit past here. # my($challenge, $response); print "Server challenge: "; while ($challenge = ) { chomp $challenge; $challenge =~ s/^\s+//; $challenge =~ s/\s+$//; next unless $challenge; exit if ($challenge eq "q"); # Strip status code from response if necessary. # From ``334 PDYzNTkxLjEwMjYxMzE4MzlAZm9vLmJhci5jb20+'' # to ``PDYzNTkxLjEwMjYxMzE4MzlAZm9vLmJhci5jb20+'' if ($challenge =~ /^\d\d\d\s+(\S+)$/) { $challenge = $1; } chomp($challenge = decode_base64($challenge)); print "Decoded challenge is: $challenge\n\n"; $response = hmac_md5_hex($challenge, $secret); print "User: $user Digest: $response\n"; print "Encoded response (reply with this):\n"; print encode_base64($user . " " . $response, ""), "\n\n\n"; print "Server challenge ('q' to quit): "; } __END__ $Id: auth.pl,v 1.2 2002/07/23 09:33:49 james Exp $