[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: passwd.c and crypt



I made a patch in OpenSSL to not compile the crypt() function when the
native system already provides it, for this reason.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc  

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Kurt D.
> Zeilenga
> Sent: Monday, January 15, 2001 10:30 AM
> To: alexandre.ghisoli@ycom.ch
> Cc: openldap-software@OpenLDAP.org
> Subject: Re: passwd.c and crypt
> 
> 
> At 10:34 AM 1/15/01 +0100, Alexandre Ghisoli wrote:
> >Like somes *BSD, Linux glibc can use an evolution of std unix crypt().
> >Theses functions accepts an longer salt, adn if the salt start with $1$,
> >this activate an MD5 hash (not the usual one).
> >
> >For autentification, I need to reuse password stored in this form.
> >
> >But, openssl crypto.a lib offer another crypt() that doesnt 
> understand $1$.
> >So, I've modified libs order in slapd to resolve this issue.
> >Threre is an update for this ?
> 
> One likely should update OpenSSL not to provide crypt(3) when
> it's available otherwise.
> 
> I note that one must be very careful reordering libraries...
> 
> Kurt
>