[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
RE: passwd.c and crypt
I made a patch in OpenSSL to not compile the crypt() function when the
native system already provides it, for this reason.
-- Howard Chu
Chief Architect, Symas Corp. Director, Highland Sun
http://www.symas.com http://highlandsun.com/hyc
> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Kurt D.
> Zeilenga
> Sent: Monday, January 15, 2001 10:30 AM
> To: alexandre.ghisoli@ycom.ch
> Cc: openldap-software@OpenLDAP.org
> Subject: Re: passwd.c and crypt
>
>
> At 10:34 AM 1/15/01 +0100, Alexandre Ghisoli wrote:
> >Like somes *BSD, Linux glibc can use an evolution of std unix crypt().
> >Theses functions accepts an longer salt, adn if the salt start with $1$,
> >this activate an MD5 hash (not the usual one).
> >
> >For autentification, I need to reuse password stored in this form.
> >
> >But, openssl crypto.a lib offer another crypt() that doesnt
> understand $1$.
> >So, I've modified libs order in slapd to resolve this issue.
> >Threre is an update for this ?
>
> One likely should update OpenSSL not to provide crypt(3) when
> it's available otherwise.
>
> I note that one must be very careful reordering libraries...
>
> Kurt
>