- Upgrade to 6.5.1 * Drop two wolfSSL compile-time checks that were for older 6.4 or for future 7.0 releases and broke compilation with wolfSSL 5.7.4. Fixes https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=282413#c4 * Use %p instead of non-portable %#p for one wolfSSL-related diagnostic message (FreeBSD defines %#p to be %p, on many other platforms it's undefined behavior). * Add regex_helper.c to list of files that contain translatable strings, which contains two strings we missed to translate. * Simplify EVP_MD_fetch API detection ("like OpenSSL 3" vs. "like OpenSSL 1") for version switch and base it on the claimed OpenSSL version of the crypto SSL, which works for LibreSSL (claims OpenSSL 2) and wolfSSL alike. * Several translations added - Rebased fetchmail-6.3.8-smtp_errors.patch - Rebased fetchmail-FAQ-list-gmail-options-including-oauthbearer-and-app.patch - Rebased fetchmail-add-contrib-fetchnmail-oauth2.py-token-acquisition-u.patch - Rebased fetchmail-add-imap-oauthbearer-support.patch - Rebased fetchmail-add-passwordfile-and-passwordfd-options.patch - Rebased fetchmail-add-query_to64_outsize-utility-function.patch - Rebased fetchmail-bump-max-passwordlen-to-1bytes.patch - Rebased fetchmail-give-each-ctl-it-s-own-copy-of-password.patch - Rebased fetchmail-increase-max-password-length-to-handle-oauth-tokens.patch - Rebased fetchmail-re-read-passwordfile-on-every-poll.patch - Rebased fetchmail-support-oauthbearer-xoauth2-with-pop3.patch - Rebased fetchmailconf-no-more-future.patch OBS-URL: https://build.opensuse.org/request/show/1227336 OBS-URL: https://build.opensuse.org/package/show/server:mail/fetchmail?expand=0&rev=159
33 lines
1.3 KiB
Diff
33 lines
1.3 KiB
Diff
From: =?utf-8?q?Martin_Sj=C3=B6lund_=3Cmartin=40sjoelund=2Ese=3E?=
|
|
Date: Thu, 17 Dec 2020 09:09:44 +0100
|
|
Subject: Increase max password length to handle oauth tokens
|
|
Git-repo: https://gitlab.com/fetchmail/fetchmail.git
|
|
Git-commit: 6e877b5d92527ad501aaef46e37704b51db316fb
|
|
|
|
The maximum length of oauth2 access tokens is unbounded.
|
|
* Google uses 2048 byte access tokens and "Google reserves the right
|
|
to change token size within these limits, and your application
|
|
must support variable token sizes accordingly."
|
|
* My Office365 access token is 2108 bytes long.
|
|
* Intuit says you must support 4096 byte access tokens.
|
|
|
|
This simply patches the hard-coded limit to 4096 bytes, but it might
|
|
not be sufficient.
|
|
---
|
|
fetchmail.h | 2 +-
|
|
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
|
Index: fetchmail-6.5.1/fetchmail.h
|
|
===================================================================
|
|
--- fetchmail-6.5.1.orig/fetchmail.h
|
|
+++ fetchmail-6.5.1/fetchmail.h
|
|
@@ -101,7 +101,7 @@ struct addrinfo;
|
|
|
|
#define NAMELEN 64 /* max username length */
|
|
/* oauth2 access tokens seem to be about 130 characters; make this longer: */
|
|
-#define PASSWORDLEN 256 /* max password length */
|
|
+#define PASSWORDLEN 4096 /* max password length; oauth2 tokens have no maximum length */
|
|
#define DIGESTLEN 33 /* length of MD5 digest */
|
|
|
|
/* exit code values */
|