Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@httpd.apache.org
Errors-To: <wrowe@rowe-clan.net>
Message-Id: <5.1.0.14.2.20020910104531.037afbb8@pop3.rowe-clan.net>
Date: Tue, 10 Sep 2002 10:46:21 -0500
To: dev@httpd.apache.org
From: "William A. Rowe, Jr." <wrowe@rowe-clan.net>
Subject: Re: cvs commit: httpd-2.0/support htpasswd.c
Cc: dev@httpd.apache.org
In-Reply-To: <20020910063611.GD31933@apache.org>
References: <20020910030051.77810.qmail@icarus.apache.org>
 <20020910030051.77810.qmail@icarus.apache.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed

At 01:36 AM 9/10/2002, Justin Erenkrantz wrote:
>On Tue, Sep 10, 2002 at 03:00:51AM -0000, jerenkrantz@apache.org wrote:
> > jerenkrantz    2002/09/09 20:00:50
> >
> >   Modified:    .        CHANGES
> >                support  htpasswd.c
> >   Log:
> >   Add ability to htpasswd (via -5) to produce non-obfuscated MD5 hashes.
> >
> >   mod_auth_digest's passwords can not be obfuscated by the APR magic
> >   sequence (as we don't call apr_password_validate on them), therefore we
> >   need a tool to produce true MD5 hex hashes.
>
>Well, obviously, I needed to go back to mod_auth_digest school as
>htpasswd has nothing to do with mod_auth_digest which uses a
>completely different format.  (I somehow forgot about htdigest.)
>
>But, I still think producing unobfuscated md5 hashes is a useful
>option, so I'll leave this commit in.  -- justin

Can it be parsed by mod_auth from an .htpasswd file?

If not, please revert the commit.

Bill