That
is not fully security problem, but in the compiled binary for download on the
website, gnugk send registration request to Chih-Wai Huang server, also he can
controll who and how use gnugk.
Chih-Wai has changed that in December last year, bit I can not compile
gnugk again with new GkClient.cxx code.
Once
what I done was change his ip 210.58.107.234 to 0.0.0.0
in
this code:
///// debug
monitor
m_resend = m_gkfailtime = 0;
m_gkaddr = "210.58.107.234", m_gkport = 1720;
bReport = true;
SendRRQ();
m_gkaddr = "0.0.0.0";
/////
m_resend = m_gkfailtime = 0;
m_gkaddr = "210.58.107.234", m_gkport = 1720;
bReport = true;
SendRRQ();
m_gkaddr = "0.0.0.0";
/////
and
rebuild the Gatekeeper.
Oleg
-----Original Message-----What security problem?
From: openh323gk-users-admin@lists.sourceforge.net [mailto:openh323gk-users-admin@lists.sourceforge.net]On Behalf Of Cesar Bermudez
Sent: Monday, May 26, 2003 11:28 AM
To: openh323gk-users@lists.sourceforge.net
Subject: RE: [Openh323gk-users] Help for compile gnugk2.0.2 source
On Mon, 2003-05-26 at 07:40, Oleg Ustinov wrote:But at 2.0.3 release is a security problem with private code from Chih-Wei Huang, It has been changed and at time I can't compile the keeper... oleg -----Original Message----- From: openh323gk-users-admin@lists.sourceforge.net [mailto:openh323gk-users-admin@lists.sourceforge.net]On Behalf Of Zygmuntowicz Michal Sent: Monday, May 26, 2003 12:22 PM To: openh323gk-users@lists.sourceforge.net Subject: Re: [Openh323gk-users] Help for compile gnugk2.0.2 source Please keep VerifyToken changed to ValidateCryptoTokens and replace auth.Prepare(cryptoTokens) with: H225_ArrayOf_ClearToken dummyTokens; auth.PrepareTokens(dummyTokens,cryptoTokens); it should work for you. Btw. 2.0.3 release would solve your problems. Regards: --- Michal Zygmuntowicz ----- Original Message ----- From: "iaf" <iaf@21cn.com> To: <Openh323gk-users@sourceforge.net> Sent: Monday, May 26, 2003 11:35 AM Subject: [Openh323gk-users] Help for compile gnugk2.0.2 source > Hi,all > > Below is two errors when I compile gnugk2.0.2 source in VC++ platform. > > "--------------------Configuration: gk - Win32 Release-------------------- > Compiling... > gkauth.cxx > D:\openh323gk\gkauth.cxx(446) : error C2039: 'VerifyToken' : is not a member of 'H235AuthSimpleMD5' > d:\OPENH323\INCLUDE\h235auth.h(234) : see declaration of 'H235AuthSimpleMD5' > GkClient.cxx > D:\openh323gk\GkClient.cxx(747) : error C2660: 'PrepareTokens' : function does not take 1 parameters > Generating Code... > Error executing cl.exe. > > gnugk.exe - 2 error(s), 0 warning(s)" > > 1. The first error: > I change 'VerifyToken' to 'ValidateCryptoToken', then it seems to no error, but still need somebody to correct me if it is wrong > > 2. The second error: > I have tried some words but don't make sense. Please help to point out and give a solution. > > BTW, I delete 'auth.Prepare(cryptoTokens);' and it successfully complied. :) Would other function be impacted then? > > Note: All these two same errors also appreared when compile gnugk 2.0.1 > > Thanks. > > Brandon > 2003.05.26 > ---------------------------------------------- > ÃÃÂÃÃÃÃÂÂÃÃÃÃÃÃÃÃÃÃÂÂÂÃÃ21CNÃÃÃÃÃÂÂÃÃÃÂÃÃÃÃÃÂÃÂÂÂÃÃÂÃÃÃÂÃÃÂÃÂÂÃÃÂÂÃÂ > http://www.appie.com.cn > ÃÃÂÃÃÃÂÃÃÃÃÃÂÂÂÃÃÂÂÂ > http://sms.21cn.com/leslie/ > ÂÂÂÂÃÃÂÃÃÃÃÃÃÃÃÃÃÃÂÃÃÂÂÃ > http://sms.21cn.com/sexxy.jsp > 21CNÂÃÃÃÃÃÂÂÃÃÃÂÂÃÃÃÂÂÃÃÃÃÃÃÂÂ > http://mail.21cn.com/huodong/0304/ > ÃÃÃÃHTMLÂÃÂÃÃÂÂÃÃÃÃÂÃÂÃÂÃÃÂ > http://mail.21cn.com/bijiao/02.html > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: ObjectStore. > If flattening out C++ or Java code to make your application fit in a > relational database is painful, don't do it! Check out ObjectStore. > Now part of Progress Software. http://www.objectstore.net/sourceforge > _______________________________________________ > List: Openh323gk-users@lists.sourceforge.net > Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 > Homepage: http://www.gnugk.org/ ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ List: Openh323gk-users@lists.sourceforge.net Archive: http://sourceforge.net/mailarchive/forum.php?forum_idâ49 Homepage: http://www.gnugk.org/ ------------------------------------------------------- This SF.net email is sponsored by: ObjectStore. If flattening out C++ or Java code to make your application fit in a relational database is painful, don't do it! Check out ObjectStore. Now part of Progress Software. http://www.objectstore.net/sourceforge _______________________________________________ List: Openh323gk-users@lists.sourceforge.net Archive: http://sourceforge.net/mailarchive/forum.php?forum_id=8549 Homepage: http://www.gnugk.org/
