fix(deps): bump scram-client to 3.3

Signed-off-by: Jorge Solorzano <jorsol@gmail.com>

Author: jorsol

vertx-pg-client/pom.xml

@@ -51,7 +51,7 @@
     <dependency>
       <groupId>com.ongres.scram</groupId>
       <artifactId>scram-client</artifactId>
-      <version>3.2</version>
+      <version>3.3</version>
     </dependency>
 
     <!-- Testing purposes -->

vertx-pg-client/src/main/java/io/vertx/pgclient/impl/auth/scram/ScramSessionImpl.java

@@ -17,6 +17,7 @@
 
 package io.vertx.pgclient.impl.auth.scram;
 
+import com.ongres.scram.client.ChannelBindingPolicy;
 import com.ongres.scram.client.ScramClient;
 import com.ongres.scram.common.StringPreparation;
 import com.ongres.scram.common.exception.ScramInvalidServerSignatureException;
@@ -32,6 +33,7 @@
 import javax.net.ssl.SSLException;
 import javax.net.ssl.SSLSession;
 import java.nio.charset.StandardCharsets;
+import java.security.NoSuchAlgorithmException;
 import java.security.cert.Certificate;
 import java.security.cert.CertificateEncodingException;
 import java.security.cert.X509Certificate;
@@ -73,6 +75,7 @@ public ScramClientInitialMessage createInitialSaslMessage(ByteBuf in, ChannelHan
         .username(username) // ignored by the server, use startup message
         .password(password)
         .stringPreparation(StringPreparation.POSTGRESQL_PREPARATION)
+        .channelBindingPolicy(ChannelBindingPolicy.ALLOW)
         .channelBinding(TlsServerEndpoint.TLS_SERVER_END_POINT, channelBindingData)
         .build();
 
@@ -128,10 +131,10 @@ private byte[] extractChannelBindingData(ChannelHandlerContext ctx) {
             Certificate peerCert = certificates[0]; // First certificate is the peer's certificate
             if (peerCert instanceof X509Certificate) {
               X509Certificate cert = (X509Certificate) peerCert;
-              return TlsServerEndpoint.getChannelBindingData(cert);
+              return TlsServerEndpoint.getChannelBindingHash(cert);
             }
           }
-        } catch (CertificateEncodingException | SSLException e) {
+        } catch (CertificateEncodingException | SSLException | NoSuchAlgorithmException e) {
           // Cannot extract X509Certificate from SSL session
           // handle as no channel binding available
         }