apr-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From <...@rkbloom.net>
Subject Re: apr_password_validate is not testing md5/sha1 in the apr test suite
Date Thu, 27 May 2004 00:14:50 GMT

On Wed, 26 May 2004, Stas Bekman wrote:

> So I'm trying to drop crypt and trying to write tests for the md5 and sha1
> parts of the apr_password_validate. I fail to come up with any test input that
> will pass the test. I try various md5 and sha1 functions, and none of them
> matches. Is it supposed to work only with hash values generated by apr's own
> md5 and sha1 functions? I suppose I miss something, since for example digest
> auth hash is generated by the client, and certainly can't know about apr's
> function.
> I hoped to find the tests in apr-util/test/testpass.c, but alas neither md5
> nor sha1 hashes are tested at all. Only crypt which is not available
> crossplatform.
> Suggestions?

Use htpasswd to generate some passwords.  That should give you some data
to test with.  Also it will show you how to generate the data for
yourself.  The APR-util test suite is taking a back-seat to the APR test
suite currently.


View raw message