World: r3wp

I'll keep them for ppl still using 3.x server versions

rebol now has checksum/secure ....

ok ....

Is 'sha1 encoding available in free REBOL cores ?

the strange things is, there is long-password flag, but server somehow 
does not report it during negotiation ...

yes, in cores - try help checksum ... wait a bit ...

>> help checksum
USAGE:

    CHECKSUM data /tcp /secure /hash size /method word /key key-value

DESCRIPTION:
     Returns a CRC or other type of checksum.
     CHECKSUM is a native value.

ARGUMENTS:
     data -- Data to checksum (Type: any-string)

REFINEMENTS:
     /tcp -- Returns an Internet TCP 16-bit checksum.
     /secure -- Returns a cryptographically secure checksum.
     /hash -- Returns a hash value
         size -- Size of the hash table (Type: integer)
     /method -- Method to use
         word -- Method: SHA1 MD5 (Type: word)
     /key -- Returns keyed HMAC value
         key-value -- Key to use (Type: any-string)

so basically checksum/secure checksum/secure "mypass" gives exactly 
the same result as in mysql doc page posted above.....

however, the trouble imo comes from sha1(public-seed, hash_stage2) 
... it calls two times sha1_input, without reading out the result 
first ... I am afraid that maybe we will have to reimplement all 
hashing functions in rebol now?

btw - I put following code into handshake:

read-string (pl/long-seed: join sys-copy pl/crypt-seed string)
to end

simply to not affect old functionality ...

well, and that's all I was capable of so far :-)

Ok, thanks for all the info. I'm working on it...

cool! ppl will surely appreciate it - rebol without free mySQL scheme 
is kind of show stopper for some of them :-)

sha_input: http://www.distlab.dk/mysql-4.1/html/mysys_2sha1_8c-source.html#l00179

Seems the two inputs are like a join. Usefull this way if one hashes 
files withput loading everything in memory.

join?

Accepts an array of octets as the next portion of the message.

if you do two such inputs, it should be like 
 checksum/secure join part1 part2

scramble-long: func [pass port][
     hash-stage1: checksum/secure pass
     hash-stage2: checksum/secure hash-stage1

     to-string xor hash-stage1 (checksum/secure port/locals/long-seed 
     hash-stage2)  ;.--- what to do here?
]

aha ...

bad handshake :-)

grrr :)

Is the above your code?
  (checksum/secure port/locals/long-seed hash-stage2) 
->
  (  (checksum/secure port/locals/long-seed)  (hash-stage2) )
did you forget a join or something?

huh, connected? :-)

really? :)

yes!

yes yes yes yes!!!!!!

Volker is GURU!

Hey, congrats! So much to rebol-community ;)

scramble-long: func [pass port][
     hash-stage1: checksum/secure pass
     hash-stage2: checksum/secure hash-stage1

     to-string xor hash-stage1 (checksum/secure join port/locals/long-seed 
     hash-stage2)
]

And you are a master librarian :)

Well, I just logged in at the right moment... :)

Congrats.

Now to sleep...

Goodnight Anton.

ufff ... :-)

Somehow a good feeling. Specially imaging Pekr dancing around. Yes 
yes yes yes :))

:-) exactly :-)

I did not expect mysel to be able to decode simple functionality 
of the scheme. But on saturday I tried to tell myself, that maybe 
I can at least give some pointers to more skilled rebollers, to not 
hear that I am actually doing nothing ...

I prepared Ethereal to just find out, that it will not report any 
packets on localhost ;-)

without your hint to protocol internals, plust the 2x checksum/secure 
being identical to mysql docs, nothing like that would be possible 
on my side ....

no I am mid-level guru, being at least possible to narrow down the 
problem, and provide initial leads to final solution ...

now who is after NS browser-plug-in, guys? ;-)

Yep. Without your starters i would be lost when trying to start.

as for NS plug-in, I provided some started too ... basically less 
than 15 funcs to wrap to have it without tricks imo ;-) I just need 
C coder for similar cooperation :-)

This hobby c-coder would need an xp-machine, and the plugin is the 
only use i have for it..

you don't have windows machine?

Not such a big one.

That moz-sdk seems to ned msvc, and that needs w2k or better afaik. 
Have neither that windows nor more than 128mb.

not sure the sdk is needed. If we are after old plug-in, not mozz 
components, then it is really few funcs to wrap ...

Had problems with some free compilers, they did not understand the 
modern c++ in the header-files. but maybe some old moz-version could 
work.