| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
| |
gratuitous difference between us and our sister project.
This was given to me _ages_ ago. May apologies to Paul for the length
of time its taken me to commit.
Obtained from: Niels Provos <provos@physnet.uni-hamburg.de>/OpenBSD
Submitted by: Paul Herman <pherman@frenchfries.net>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
one-way hash functions for authentication purposes. There is no more
"set the libcrypt->libXXXcrypt" nightmare.
- Undo the libmd.so hack, use -D to hide the md5c.c internals.
- Remove the symlink hacks in release/Makefile
- the algorthm is set by set_crypt_format() as before. If this is
not called, it tries to heuristically figure out the hash format, and
if all else fails, it uses the optional auth.conf entry to chose the
overall default hash.
- Since source has non-hidden crypto in it there may be some issues with
having the source it in some countries, so preserve the "secure/*"
division. You can still build a des-free libcrypt library if you want
to badly enough. This should not be a problem in the US or exporting
from the US as freebsd.org had notified BXA some time ago. That makes
this stuff re-exportable by anyone.
- For consistancy, the default in absence of any other clues is md5. This
is to try and minimize POLA across buildworld where folk may suddenly
be activating des-crypt()-hash support. Since the des hash may not
always be present, it seemed sensible to make the stronger md5 algorithm
the default.
All things being equal, no functionality is lost.
Reviewed-by: jkh
(flame-proof suit on)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
for crypt(3) by now. In any case:
Add crypt_set_format(3) + documentation to -lcrypt.
Add login_setcryptfmt(3) + documentation to -lutil.
Support for switching crypt formats in passwd(8).
Support for switching crypt formats in pw(8).
The simple synopsis is:
edit login.conf; add a passwd_format field set to "des" or "md5"; go nuts :)
Reviewed by: peter
|
|
|
|
|
|
|
| |
symlinks. The name is against my better judgement, but I defer to ancient
tradition here because I'm a nice guy.
Reviewed by: -current
|
| |
|
| |
|
|
|
|
| |
Pointed out by: marcel
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
Revert the major number back to 2.
libcrypt only export one function, before the recent changes and now:
char *crypt(const char *key, const char *salt);
The prototype didn't changed. Internal representation of `char' and `char *'
didn't changed. Therefore, there is no reason to change the version number.
|
|
|
|
| |
a special SONAME of libcrypt.so.3 and the runtime symlink doesn't work.
|
|
|
|
|
| |
duplication of effort. Also a large cleanup of the code, inspired
by Brandon Gillespie.
|
| |
|
| |
|
|
|
|
|
| |
- Be consistent with section names as outlined in mdoc(7).
- Other misc mdoc cleanup.
|
|
|
|
|
| |
can be found.
Submitted by: Bruce
|
| |
|
|
|
|
|
|
| |
the Makefile handles des support by just including the single .c file.
Reviewed by: Mark Murray
|
|
|
|
| |
the US and not allowed to see this. I kept my eyes closed. 8-)
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.
Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.
|
|
|
|
|
| |
really want them) from /usr/src. This is the final version of the
patches, incorporating the feedback I've received from -current.
|
| |
|
| |
|
|
|
|
|
| |
(DES or MD5) based on the type of salt used. Salt beginning with "$1$"
indicates MD5.
|
| |
|
|
|
|
|
| |
(Our existing fixes already plugged the security holes involved.)
Submitted by: Geoff Rehmet after consultation with David Burren
|
|
|
|
|
|
| |
world of his master plan.
Submitted by: pst
|
|
|
|
|
|
|
|
|
|
|
| |
so that linking against -lcrypt (-ldescrypt) will give us the good
versions instead of the stubs in libc. (These changes need to be
made to the non-US version of libdescrypt too!)
Allow building and support for bdes program.
A bit more work still needs to be done on secure telnet.
Submitted by: pst
|
| |
|
| |
|
|
|
|
| |
Submitted by: Geoff
|
|
|
|
| |
Submitted by: Geoff Rehmet
|
|
|
|
|
|
| |
2) fix .include in secure/lib/Makefile.inc
3) fix afterinstall rule in libcrypt/Makefile
Submitted by: Geoff Rehmet
|
|
|
|
|
|
| |
libcrypt. There may be a little modification neede to this makefile once
we start working on tidy make world's.
Submitted by: geoff.
|
|
|
|
| |
Submitted by: Geoff Rehmet
|
|\
| |
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
|
|
|
|
|
| |
The next commit will remove all symbols except _crypt()
Reviewed by: Geoff Rehmet
Submitted by: David Burren
|
|
The next commit will remove all symbols except _crypt()
Reviewed by: Geoff Rehmet
Submitted by: David Burren
|