httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe Jr." <wr...@rowe-clan.net>
Subject Re: [VOTE] Release Apache httpd 2.4.4 as GA
Date Wed, 20 Feb 2013 07:07:03 GMT
On Wed, 20 Feb 2013 16:42:56 +1000
Noel Butler <noel.butler@ausics.net> wrote:

> On Tue, 2013-02-19 at 23:31 -0600, William A. Rowe Jr. wrote:
> 
> 
> 
> > 
> > Note he mentioned SHA512, not crypt().  I don't know that this makes
> > a difference on that architecture.
> > 
> 
> 
> But isn't it just a hand off to system crypt()  (modern crypt(), not
> the ancient 8 char one), since httpd is limited in native options,
> what it doesn't understand is passes to system crypt() to handle.

Which remains my point... our current 2.4 and 2.2 candidates should
suffer the same flaw.


Mime
View raw message