Cyrus SASL 2.1.25 Released

Ken Murchison murch at
Tue Sep 13 10:53:22 EDT 2011

I'd like to announce the release of Cyrus SASL 2.1.25 on

Major changes in Cyrus SASL 2.1.25:

Added support for channel bindings
Added support for ordering SASL mechanisms by strength (on the client 
side), or using the "client_mech_list" option.
Allow DIGEST-MD5 plugin to be used for client-side and server-side HTTP 
Digest, including running over non-persistent connections (RFC 2617)
New SASL plugin: SCRAM
New SASL plugin: GS2
Updated config to the latest GNU snapshot

Major fixes in Cyrus SASL 2.1.25:

* Fixed a crash caused by aborted SASL authentication
  and initiation of another one using the same SASL context.
* (Windows) Fixed the random number generator to actually produce random
  output on each run
* Various improvements to DIGEST-MD5 to improve interoperability with 
some slightly broken clients

For a complete list look at the NEWS file in the distribution.  Many 
thanks to Alexey Melnikov who did most of the work preparing this release.

Please send any feedback either to cyrus-sasl at
(public list) or to cyrus-bugs at

Download at:

Kenneth Murchison
Principal Systems Software Engineer
Carnegie Mellon University

More information about the Cyrus-announce mailing list