]> git.kaiwu.me - nginx.git/commit
Added support for {SHA} passwords (ticket #50).
authorMaxim Dounin <mdounin@mdounin.ru>
Thu, 7 Feb 2013 12:09:56 +0000 (12:09 +0000)
committerMaxim Dounin <mdounin@mdounin.ru>
Thu, 7 Feb 2013 12:09:56 +0000 (12:09 +0000)
commita2b987e79f099e34ddc5206b2b7c85f7405e5b74
tree13519c1e8a3ecc09ced475e01e13c388afdbd5eb
parent6cb9bbe71cf0f3f4e31a5d768042ad3e5eb24199
Added support for {SHA} passwords (ticket #50).

Note: use of {SHA} passwords is discouraged as {SHA} password scheme is
vulnerable to attacks using rainbow tables.  Use of {SSHA}, $apr1$ or
crypt() algorithms as supported by OS is recommended instead.

The {SHA} password scheme support is added to avoid the need of changing
the scheme recorded in password files from {SHA} to {SSHA} because such
a change hides security problem with {SHA} passwords.

Patch by Louis Opter, with minor changes.
src/core/ngx_crypt.c