sqlmapproject/sqlmap · error · OperationalError

SCRAM server signature mismatch (rogue server?)

Error message

SCRAM server signature mismatch (rogue server?)

What it means

Error "SCRAM server signature mismatch (rogue server?)" thrown in sqlmapproject/sqlmap.

Source

Thrown at extra/dbwire/postgres.py:294

            # Without this the client proves itself to the server and simply trusts whatever answers back.
            # ServerSignature = HMAC(ServerKey, AuthMessage) can only be produced by a peer that holds the
            # stored credentials, so comparing it is what makes the exchange mutual (RFC 5802 5, 5.1).
            if salted is None or auth_message is None:
                raise OperationalError("unexpected SCRAM server-final message")
            try:
                attrs = dict(kv.split("=", 1) for kv in payload[4:].decode("ascii").split(","))
            except (ValueError, UnicodeDecodeError) as ex:
                raise OperationalError("malformed SCRAM server-final message (%s)" % ex)
            if "e" in attrs:
                raise OperationalError("SCRAM authentication failed (%s)" % attrs["e"])
            try:
                signature = base64.b64decode(attrs["v"])
            except (KeyError, binascii.Error, ValueError) as ex:
                raise OperationalError("malformed SCRAM server signature (%s)" % ex)
            server_key = hmac.new(salted, b"Server Key", hashlib.sha256).digest()
            expected = hmac.new(server_key, auth_message.encode("ascii"), hashlib.sha256).digest()
            if not hmac.compare_digest(signature, expected):
                raise OperationalError("SCRAM server signature mismatch (rogue server?)")
        else:
            raise InterfaceError("unsupported authentication request %d" % code)

def _raise_server_error_as_operational(payload):
    message, _ = _error_message(payload)
    raise OperationalError("(remote) %s" % message)

def connect(host=None, port=5432, user=None, password=None, database=None, connect_timeout=None, **kwargs):
    try:
        sock = socket.create_connection((host or "localhost", int(port or 5432)), timeout=connect_timeout)
        keepalive(sock)
    except (socket.error, socket.timeout) as ex:
        raise OperationalError("could not connect to '%s:%s' (%s)" % (host, port, ex))

    params = b""
    for key, value in (("user", user or ""), ("database", database or user or ""), ("client_encoding", "UTF8")):
        params += key.encode("ascii") + b"\x00" + ("%s" % value).encode("utf-8") + b"\x00"
    params += b"\x00"

View on GitHub (pinned to 0a35b20e39)

When it happens

Trigger: Thrown at extra/dbwire/postgres.py:294 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of sqlmapproject/sqlmap@0a35b20e39 (2026-08-26). Data as JSON: /api/errors/19a6ddcc853db2b7. Report an issue: GitHub.