Ticket #444 (closed defect: fixed)

Opened 3 years ago

Last modified 13 months ago

Apache's htpasswd hashes

Reported by: lapo@… Owned by: jan
Priority: normal Milestone:
Component: core Version: 1.4.x-svn
Severity: normal Keywords:
Cc: lapo@… Blocked By:
Need User Feedback: no Blocking:

Description

In order to convert existing Apache installations with lots and lots of existing htpasswd-based users, it would be convenient to support Apache's htpasswd format generated by -m and -s: 

% htpasswd -nbm username password
username:$apr1$mpXPC...$NxRSyyOSoVSE2KvYWB2M/.

% htpasswd -nbs username password
username:{SHA}W6ph5Mm5Pz8GgiULbPgzG37mj9g=

Attachments

lighttpd-apr1.patch (6.1 kB) - added by Elan Ruusamäe <glen@…> 2 years ago.
ripped apr_md5_encode from apr-util. implements $apr1$ hashing. tested, compiles works

Change History

Changed 2 years ago by Elan Ruusamäe <glen@…>

one can take look at apr_md5_encode() from: http://svn.apache.org/viewvc/apr/apr-util/trunk/crypto/apr_md5.c?revision=165137&view=markup

lighttpd already has source:branches/lighttpd-merge-1.4.x/src/md5.c which is quite similar.

Changed 2 years ago by Elan Ruusamäe <glen@…>

ripped apr_md5_encode from apr-util. implements $apr1$ hashing. tested, compiles works

Changed 2 years ago by Elan Ruusamäe <glen@…>

here's also patch for 1.4.12:

http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/SOURCES/lighttpd-apr1.patch?rev=1.2

Changed 13 months ago by jan

  • status changed from new to closed
  • resolution set to fixed
  • pending unset

[1369] seems to have applied this patch already.

Add/Change #444 (Apache's htpasswd hashes)

Author



Change Properties
<Author field>
Action
as closed
Next status will be 'reopened'
 
Note: See TracTickets for help on using tickets.