You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@openmeetings.apache.org by "K. Kamhamea" <ka...@googlemail.com> on 2020/04/17 11:54:29 UTC
change password encoding MD5
I was just about testing other encryption methods as described
https://openmeetings.apache.org/CustomCryptMechanism.html
Here I run into the following undocumented problems
1. Where to copy the MD5Implementation.java
<https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
file into my file system
2. How to set the CLASSPATH so that it can be found anywhere in my
filesystem
3. What is actually the text string to be added into the configuration
variable " crypt.class.name "
Alternatively I tried this class
http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
But changing the configuration variable to "
org.apache.openmeetings.util.crypt.MD5 " creates but an error.
Best K.
Re: change password encoding MD5
Posted by ratatouille <ra...@bitclusive.de>.
Hi!
Does not work. 404
Andreas
Maxim Solodovnik <so...@gmail.com> schrieb am 19.04.20 um 16:32:20 Uhr:
> Works for me
> Can anyone else check?
>
> On Sun, Apr 19, 2020, 15:01 K. Kamhamea <ka...@googlemail.com> wrote:
>
> > This link doesn't work either. Got a 404
> > :-(
> >
> > Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik <
> > solomax666@gmail.com>:
> >
> >> forget the link https://github.com/openmeetings/custom-crypt
> >>
> >> On Sun, 19 Apr 2020 at 00:30, K. Kamhamea <ka...@googlemail.com>
> >> wrote:
> >>
> >>> ???
> >>> Where is the example?
> >>>
> >>> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim Solodovnik <
> >>> solomax666@gmail.com>:
> >>>
> >>>> Here is the example
> >>>>
> >>>> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <ka...@googlemail.com>
> >>>> wrote:
> >>>>
> >>>>> You're right. I'm using M3, but according the website (
> >>>>> https://openmeetings.apache.org/downloads.html) it is the "Latest
> >>>>> Official WebRTC Release" :-)
> >>>>> Best K.
> >>>>>
> >>>>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <in...@bureau-de-poste.net>:
> >>>>>
> >>>>>> Hello,
> >>>>>>
> >>>>>> About all this work you are doing on the manual, I hope you are
> >>>>>> making a manual for the current M4 and not M3 - as some of the symbols
> >>>>>> have changed, etc.
> >>>>>>
> >>>>>> Best regards,
> >>>>>>
> >>>>>> Ed
> >>>>>>
> >>>>>>
> >>>>>> Quoting "K. Kamhamea" <ka...@googlemail.com>:
> >>>>>>
> >>>>>> You are right we should not invest to much time and efforts here. It
> >>>>>> is rather a negligibility. I just want to keep the manual as detailed as
> >>>>>> possible. But there are many other more pressing things to solve. I will
> >>>>>> create a new thread for that.
> >>>>>> K.
> >>>>>>
> >>>>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
> >>>>>> solomax666@gmail.com>:
> >>>>>>
> >>>>>>> I can create example project for this (please ping me if i will be
> >>>>>>> too silent)
> >>>>>>>
> >>>>>>> According to MD5 as password hash function: this is bad idea
> >>>>>>>
> >>>>>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
> >>>>>>>
> >>>>>>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
> >>>>>>> wrote:
> >>>>>>>
> >>>>>>>> OMG. I'm not experienced with Java. We are doing python mostly and
> >>>>>>>> Javascript and rarely some C++ but never Java.
> >>>>>>>>
> >>>>>>>> I tried to compile your MD5implementation file
> >>>>>>>>
> >>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
> >>>>>>>> but it failed because of missing dependencies. It probably requires
> >>>>>>>> the whole source of the project being downloaded and properly installed.
> >>>>>>>> So for the moment I decided I wouldn't spend my time to test all
> >>>>>>>> this I'm just going to copy your detailed instruction into the Manual.
> >>>>>>>>
> >>>>>>>> The reason why I was so interested in this topic is because of
> >>>>>>>> compatibility problems. I haven't found yet a python encryption library
> >>>>>>>> that is compatible. By contrast, MD5 is a standard that is widely used.
> >>>>>>>>
> >>>>>>>> Thank you again so much for your help
> >>>>>>>> K.
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
> >>>>>>>> solomax666@gmail.com>:
> >>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
> >>>>>>>>> wrote:
> >>>>>>>>>
> >>>>>>>>>> I was just about testing other encryption methods as described
> >>>>>>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> I doubt anyone ever try this :)
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> Here I run into the following undocumented problems
> >>>>>>>>>> 1. Where to copy the MD5Implementation.java
> >>>>>>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
> >>>>>>>>>> file into my file system
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> This is basic JAVA question :)
> >>>>>>>>> Java programs need to be compiled
> >>>>>>>>> i.e. After you have created class (which MUST implement interface)
> >>>>>>>>> you need to
> >>>>>>>>> 1) compile this class
> >>>>>>>>> 2) Pack into JAR file
> >>>>>>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in
> >>>>>>>>>> my filesystem
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
> >>>>>>>>> automatically
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>> 3. What is actually the text string to be added into the
> >>>>>>>>>> configuration variable " crypt.class.name "
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> In JAVA classes are usually being created in packages (to resolve
> >>>>>>>>> possible name clashes)
> >>>>>>>>> so You need to write something like:
> >>>>>>>>>
> >>>>>>>>> package com.googlemail.kamhamea;
> >>>>>>>>>
> >>>>>>>>> public class MySecureCryptProvider implements ICrypt {
> >>>>>>>>> ........your secure algorithm here ..........
> >>>>>>>>> }
> >>>>>>>>>
> >>>>>>>>> In config value you should write:
> >>>>>>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> Alternatively I tried this class
> >>>>>>>>>>
> >>>>>>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
> >>>>>>>>>>
> >>>>>>>>>> But changing the configuration variable to "
> >>>>>>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
> >>>>>>>>> Can't be used due to it doesn't implements ICrypt
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> Best K.
> >>>>>>>>>>
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> --
> >>>>>>>>> Best regards,
> >>>>>>>>> Maxim
> >>>>>>>>>
> >>>>>>>>
> >>>>>>>
> >>>>>>> --
> >>>>>>> Best regards,
> >>>>>>> Maxim
> >>>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>
> >>>> --
> >>>> Best regards,
> >>>> Maxim
> >>>>
> >>>
> >>
> >> --
> >> Best regards,
> >> Maxim
> >>
> >
Re: change password encoding MD5
Posted by Alvaro <zu...@gmail.com>.
...if is this:
https://github.com/openmeetings/custom-crypt
...works for me.
..............El dom, 19-04-2020 a las 16:32 +0700, Maxim Solodovnik
escribió:
> Works for me Can anyone else check?
> On Sun, Apr 19, 2020, 15:01 K. Kamhamea <ka...@googlemail.com>
> wrote:
> > This link doesn't work either. Got a 404
> > :-(
> > Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik <soloma
> > x666@gmail.com>:
> > > forget the link https://github.com/openmeetings/custom-crypt
> > > On Sun, 19 Apr 2020 at 00:30, K. Kamhamea <kamhamea@googlemail.co
> > > m> wrote:
> > > > ???
> > > > Where is the example?
> > > >
> > > > Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim Solodovnik <so
> > > > lomax666@gmail.com>:
> > > > > Here is the example
> > > > > On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <kamhamea@googlemai
> > > > > l.com> wrote:
> > > > > > You're right. I'm using M3, but according the website (http
> > > > > > s://openmeetings.apache.org/downloads.html) it is the
> > > > > > "Latest Official WebRTC Release" :-)
> > > > > > Best K.
> > > > > >
> > > > > > Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <info@bureau-de-
> > > > > > poste.net>:
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Hello,
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > About all this work you are doing on the manual, I hope
> > > > > > > you are making a manual for the current M4 and not M3 -
> > > > > > > as some of the symbols have changed, etc.
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Best regards,
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Ed
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > Quoting "K. Kamhamea" <ka...@googlemail.com>:
> > > > > > > > You are right we should not invest to much time and
> > > > > > > > efforts here. It is rather a negligibility. I just want
> > > > > > > > to keep the manual as detailed as possible. But there
> > > > > > > > are many other more pressing things to solve. I will
> > > > > > > > create a new thread for that.
> > > > > > > > K.
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim
> > > > > > > > Solodovnik <so...@gmail.com>:
> > > > > > > > > I can create example project for this (please ping me
> > > > > > > > > if i will be too silent)
> > > > > > > > >
> > > > > > > > > According to MD5 as password hash function: this is
> > > > > > > > > bad idea
> > > > > > > > > https://security.stackexchange.com/questions/52461/ho
> > > > > > > > > w-weak-is-md5-as-a-password-hashing-function
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <kamhamea@g
> > > > > > > > > ooglemail.com> wrote:
> > > > > > > > > >
> > > > > > > > > > OMG. I'm not experienced with Java. We are doing
> > > > > > > > > > python mostly and Javascript and rarely some C++
> > > > > > > > > > but never Java.
> > > > > > > > > >
> > > > > > > > > > I tried to compile your MD5implementation file
> > > > > > > > > > https://github.com/apache/openmeetings/blob/5.0.0-M
> > > > > > > > > > 3/openmeetings-
> > > > > > > > > > util/src/main/java/org/apache/openmeetings/util/cry
> > > > > > > > > > pt/MD5Implementation.java
> > > > > > > > > > but it failed because of missing dependencies. It
> > > > > > > > > > probably requires the whole source of the project
> > > > > > > > > > being downloaded and properly installed.
> > > > > > > > > > So for the moment I decided I wouldn't spend my
> > > > > > > > > > time to test all this I'm just going to copy your
> > > > > > > > > > detailed instruction into the Manual.
> > > > > > > > > >
> > > > > > > > > > The reason why I was so interested in this topic is
> > > > > > > > > > because of compatibility problems. I haven't found
> > > > > > > > > > yet a python encryption library that is compatible.
> > > > > > > > > > By contrast, MD5 is a standard that is widely used.
> > > > > > > > > >
> > > > > > > > > > Thank you again so much for your help
> > > > > > > > > > K.
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim
> > > > > > > > > > Solodovnik <so...@gmail.com>:
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <kamham
> > > > > > > > > > > ea@googlemail.com> wrote:
> > > > > > > > > > > > I was just about testing other encryption
> > > > > > > > > > > > methods as described
> > > > > > > > > > > > https://openmeetings.apache.org/CustomCryptMech
> > > > > > > > > > > > anism.html
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > I doubt anyone ever try this :)
> > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > Here I run into the following undocumented
> > > > > > > > > > > > problems
> > > > > > > > > > > > 1. Where to copy the MD5Implementation.java
> > > > > > > > > > > > file into my file system
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > This is basic JAVA question :)
> > > > > > > > > > > Java programs need to be compiled
> > > > > > > > > > > i.e. After you have created class (which MUST
> > > > > > > > > > > implement interface) you need to
> > > > > > > > > > > 1) compile this class
> > > > > > > > > > > 2) Pack into JAR file
> > > > > > > > > > > 3) Put jar to webapps/openmeetings/WEB-INF/lib
> > > > > > > > > > >
> > > > > > > > > > > > 2. How to set the CLASSPATH so that it can be
> > > > > > > > > > > > found anywhere in my filesystem
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > jars from webapps/openmeetings/WEB-INF/lib are
> > > > > > > > > > > being loaded automatically
> > > > > > > > > > >
> > > > > > > > > > > > 3. What is actually the text string to be added
> > > > > > > > > > > > into the configuration variable "
> > > > > > > > > > > > crypt.class.name "
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > In JAVA classes are usually being created in
> > > > > > > > > > > packages (to resolve possible name clashes)
> > > > > > > > > > > so You need to write something like:
> > > > > > > > > > >
> > > > > > > > > > > package com.googlemail.kamhamea;
> > > > > > > > > > >
> > > > > > > > > > > public class MySecureCryptProvider implements
> > > > > > > > > > > ICrypt {
> > > > > > > > > > > ........your secure algorithm here ..........
> > > > > > > > > > > }
> > > > > > > > > > >
> > > > > > > > > > > In config value you should write:
> > > > > > > > > > > "com.googlemail.kamhamea.MySecureCryptProvider"
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > Alternatively I tried this class
> > > > > > > > > > > > http://openmeetings.apache.org/openmeetings-uti
> > > > > > > > > > > > l/apidocs/org/apache/openmeetings/util/crypt/MD
> > > > > > > > > > > > 5.html
> > > > > > > > > > > >
> > > > > > > > > > > > But changing the configuration variable to "
> > > > > > > > > > > > org.apache.openmeetings.util.crypt.MD5 "
> > > > > > > > > > > > creates but an error.
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > https://github.com/apache/openmeetings/blob/5.0.0
> > > > > > > > > > > -M3/openmeetings-
> > > > > > > > > > > util/src/main/java/org/apache/openmeetings/util/c
> > > > > > > > > > > rypt/MD5.java
> > > > > > > > > > > Can't be used due to it doesn't implements ICrypt
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > Best K.
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > Best regards,
> > > > > > > > > > >
> > > > > > > > > > > Maxim
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Best regards,
> > > > > > > > >
> > > > > > > > > Maxim
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > >
> > > > > --
> > > > > Best regards,
> > > > > Maxim
> > > > >
> > >
> > > --
> > > Best regards,
> > > Maxim
> > >
Re: change password encoding MD5
Posted by Daniel Baker <in...@collisiondetection.biz>.
Woks now. Thanks.
On 19/04/2020 11:35, Maxim Solodovnik wrote:
> Please try now
>
> On Sun, Apr 19, 2020, 17:28 Juan Antonio Moreno Carmona
> <jamc60@gmail.com <ma...@gmail.com>> wrote:
>
> Neither to me. I think the information about custom encryption is
> at the link below.
>
> https://openmeetings.apache.org/CustomCryptMechanism.html#configuration-of-custom-crypt-style1
>
> El 19/4/20 a las 12:16, Daniel Baker escribió:
>>
>> Not for me :
>>
>>
>> On 19/04/2020 10:32, Maxim Solodovnik wrote:
>>> Works for me
>>> Can anyone else check?
>>>
>>> On Sun, Apr 19, 2020, 15:01 K. Kamhamea <kamhamea@googlemail.com
>>> <ma...@googlemail.com>> wrote:
>>>
>>> This link doesn't work either. Got a 404
>>> :-(
>>>
>>> Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik
>>> <solomax666@gmail.com <ma...@gmail.com>>:
>>>
>>> forget the link https://github.com/openmeetings/custom-crypt
>>>
>>> On Sun, 19 Apr 2020 at 00:30, K. Kamhamea
>>> <kamhamea@googlemail.com
>>> <ma...@googlemail.com>> wrote:
>>>
>>> ???
>>> Where is the example?
>>>
>>> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim
>>> Solodovnik <solomax666@gmail.com
>>> <ma...@gmail.com>>:
>>>
>>> Here is the example
>>>
>>> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea
>>> <kamhamea@googlemail.com
>>> <ma...@googlemail.com>> wrote:
>>>
>>> You're right. I'm using M3, but according
>>> the website
>>> (https://openmeetings.apache.org/downloads.html)
>>> it is the "Latest Official WebRTC Release" :-)
>>> Best K.
>>>
>>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb
>>> <info@bureau-de-poste.net
>>> <ma...@bureau-de-poste.net>>:
>>>
>>> Hello,
>>>
>>> About all this work you are doing on the
>>> manual, I hope you are making a manual
>>> for the current M4 and not M3 - as some
>>> of the symbols have changed, etc.
>>>
>>> Best regards,
>>>
>>> Ed
>>>
>>>
>>> Quoting "K. Kamhamea"
>>> <kamhamea@googlemail.com
>>> <ma...@googlemail.com>>:
>>>
>>>> You are right we should not invest to
>>>> much time and efforts here. It is
>>>> rather a negligibility. I just want to
>>>> keep the manual as detailed as
>>>> possible. But there are many other more
>>>> pressing things to solve. I will create
>>>> a new thread for that.
>>>> K.
>>>>
>>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr
>>>> schrieb Maxim Solodovnik
>>>> <solomax666@gmail.com
>>>> <ma...@gmail.com>>:
>>>>
>>>> I can create example project for
>>>> this (please ping me if i will be
>>>> too silent)
>>>> According to MD5 as password hash
>>>> function: this is bad idea
>>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>>
>>>> On Sat, 18 Apr 2020 at 02:42, K.
>>>> Kamhamea <kamhamea@googlemail.com
>>>> <ma...@googlemail.com>>
>>>> wrote:
>>>>
>>>> OMG. I'm not experienced with
>>>> Java. We are doing python
>>>> mostly and Javascript and
>>>> rarely some C++ but never Java.
>>>> I tried to compile your
>>>> MD5implementation file
>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>>> but it failed because of
>>>> missing dependencies. It
>>>> probably requires the whole
>>>> source of the project being
>>>> downloaded and properly installed.
>>>> So for the moment I decided I
>>>> wouldn't spend my time to test
>>>> all this I'm just going to copy
>>>> your detailed instruction into
>>>> the Manual.
>>>> The reason why I was so
>>>> interested in this topic is
>>>> because of compatibility
>>>> problems. I haven't found yet a
>>>> python encryption library that
>>>> is compatible. By contrast, MD5
>>>> is a standard that is widely used.
>>>> Thank you again so much for
>>>> your help
>>>> K.
>>>>
>>>> Am Fr., 17. Apr. 2020 um
>>>> 16:15 Uhr schrieb Maxim
>>>> Solodovnik
>>>> <solomax666@gmail.com
>>>> <ma...@gmail.com>>:
>>>>
>>>>
>>>> On Fri, 17 Apr 2020 at
>>>> 18:54, K. Kamhamea
>>>> <kamhamea@googlemail.com
>>>> <ma...@googlemail.com>>
>>>> wrote:
>>>>
>>>> I was just about
>>>> testing other
>>>> encryption methods as
>>>> described
>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>
>>>> I doubt anyone ever try this :)
>>>>
>>>> Here I run into the
>>>> following undocumented
>>>> problems
>>>> 1. Where to copy the
>>>> MD5Implementation.java
>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>> file into my file system
>>>>
>>>> This is basic JAVA question :)
>>>> Java programs need to be
>>>> compiled
>>>> i.e. After you have created
>>>> class (which MUST implement
>>>> interface) you need to
>>>> 1) compile this class
>>>> 2) Pack into JAR file
>>>> 3) Put jar to
>>>> webapps/openmeetings/WEB-INF/lib
>>>>
>>>> 2. How to set the
>>>> CLASSPATH so that it
>>>> can be found anywhere
>>>> in my filesystem
>>>>
>>>> jars
>>>> from webapps/openmeetings/WEB-INF/lib
>>>> are being loaded automatically
>>>>
>>>> 3. What is actually the
>>>> text string to be added
>>>> into the configuration
>>>> variable "
>>>> |crypt.class.name
>>>> <http://crypt.class.name>|
>>>> "
>>>>
>>>> In JAVA classes are usually
>>>> being created in packages
>>>> (to resolve possible name
>>>> clashes)
>>>> so You need to write
>>>> something like:
>>>> package com.googlemail.kamhamea;
>>>> public class
>>>> MySecureCryptProvider
>>>> implements ICrypt {
>>>> ........your secure
>>>> algorithm here ..........
>>>> }
>>>> In config value you should
>>>> write:
>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>
>>>> Alternatively I tried
>>>> this class
>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>> But changing the
>>>> configuration variable
>>>> to "
>>>> org.apache.openmeetings.util.crypt.MD5
>>>> " creates but an error.
>>>>
>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>> Can't be used due to it
>>>> doesn't implements ICrypt
>>>>
>>>> Best K.
>>>>
>>>>
>>>> --
>>>> Best regards,
>>>> Maxim
>>>>
>>>>
>>>> --
>>>> Best regards,
>>>> Maxim
>>>>
>>>
>>>
>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
Re: change password encoding MD5
Posted by Maxim Solodovnik <so...@gmail.com>.
Please try now
On Sun, Apr 19, 2020, 17:28 Juan Antonio Moreno Carmona <ja...@gmail.com>
wrote:
> Neither to me. I think the information about custom encryption is at the
> link below.
>
>
> https://openmeetings.apache.org/CustomCryptMechanism.html#configuration-of-custom-crypt-style1
> El 19/4/20 a las 12:16, Daniel Baker escribió:
>
> Not for me :
>
>
> On 19/04/2020 10:32, Maxim Solodovnik wrote:
>
> Works for me
> Can anyone else check?
>
> On Sun, Apr 19, 2020, 15:01 K. Kamhamea <ka...@googlemail.com> wrote:
>
>> This link doesn't work either. Got a 404
>> :-(
>>
>> Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik <
>> solomax666@gmail.com>:
>>
>>> forget the link https://github.com/openmeetings/custom-crypt
>>>
>>> On Sun, 19 Apr 2020 at 00:30, K. Kamhamea <ka...@googlemail.com>
>>> wrote:
>>>
>>>> ???
>>>> Where is the example?
>>>>
>>>> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim Solodovnik <
>>>> solomax666@gmail.com>:
>>>>
>>>>> Here is the example
>>>>>
>>>>> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <ka...@googlemail.com>
>>>>> wrote:
>>>>>
>>>>>> You're right. I'm using M3, but according the website (
>>>>>> https://openmeetings.apache.org/downloads.html) it is the "Latest
>>>>>> Official WebRTC Release" :-)
>>>>>> Best K.
>>>>>>
>>>>>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <info@bureau-de-poste.net
>>>>>> >:
>>>>>>
>>>>>>> Hello,
>>>>>>>
>>>>>>> About all this work you are doing on the manual, I hope you are
>>>>>>> making a manual for the current M4 and not M3 - as some of the symbols
>>>>>>> have changed, etc.
>>>>>>>
>>>>>>> Best regards,
>>>>>>>
>>>>>>> Ed
>>>>>>>
>>>>>>>
>>>>>>> Quoting "K. Kamhamea" <ka...@googlemail.com>:
>>>>>>>
>>>>>>> You are right we should not invest to much time and efforts here. It
>>>>>>> is rather a negligibility. I just want to keep the manual as detailed as
>>>>>>> possible. But there are many other more pressing things to solve. I will
>>>>>>> create a new thread for that.
>>>>>>> K.
>>>>>>>
>>>>>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
>>>>>>> solomax666@gmail.com>:
>>>>>>>
>>>>>>>> I can create example project for this (please ping me if i will be
>>>>>>>> too silent)
>>>>>>>>
>>>>>>>> According to MD5 as password hash function: this is bad idea
>>>>>>>>
>>>>>>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>>>>>>
>>>>>>>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>>>>>>>> Javascript and rarely some C++ but never Java.
>>>>>>>>>
>>>>>>>>> I tried to compile your MD5implementation file
>>>>>>>>>
>>>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>>>>>>>> but it failed because of missing dependencies. It probably
>>>>>>>>> requires the whole source of the project being downloaded and properly
>>>>>>>>> installed.
>>>>>>>>> So for the moment I decided I wouldn't spend my time to test all
>>>>>>>>> this I'm just going to copy your detailed instruction into the Manual.
>>>>>>>>>
>>>>>>>>> The reason why I was so interested in this topic is because of
>>>>>>>>> compatibility problems. I haven't found yet a python encryption library
>>>>>>>>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>>>>>>>>
>>>>>>>>> Thank you again so much for your help
>>>>>>>>> K.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>>>>>>>>> solomax666@gmail.com>:
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <
>>>>>>>>>> kamhamea@googlemail.com> wrote:
>>>>>>>>>>
>>>>>>>>>>> I was just about testing other encryption methods as described
>>>>>>>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> I doubt anyone ever try this :)
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Here I run into the following undocumented problems
>>>>>>>>>>> 1. Where to copy the MD5Implementation.java
>>>>>>>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>>>>>>>>> file into my file system
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> This is basic JAVA question :)
>>>>>>>>>> Java programs need to be compiled
>>>>>>>>>> i.e. After you have created class (which MUST implement
>>>>>>>>>> interface) you need to
>>>>>>>>>> 1) compile this class
>>>>>>>>>> 2) Pack into JAR file
>>>>>>>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in
>>>>>>>>>>> my filesystem
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
>>>>>>>>>> automatically
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>> 3. What is actually the text string to be added into the
>>>>>>>>>>> configuration variable " crypt.class.name "
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> In JAVA classes are usually being created in packages (to resolve
>>>>>>>>>> possible name clashes)
>>>>>>>>>> so You need to write something like:
>>>>>>>>>>
>>>>>>>>>> package com.googlemail.kamhamea;
>>>>>>>>>>
>>>>>>>>>> public class MySecureCryptProvider implements ICrypt {
>>>>>>>>>> ........your secure algorithm here ..........
>>>>>>>>>> }
>>>>>>>>>>
>>>>>>>>>> In config value you should write:
>>>>>>>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Alternatively I tried this class
>>>>>>>>>>>
>>>>>>>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>>>>>>>
>>>>>>>>>>> But changing the configuration variable to "
>>>>>>>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>>>>>>>> Can't be used due to it doesn't implements ICrypt
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Best K.
>>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> --
>>>>>>>>>> Best regards,
>>>>>>>>>> Maxim
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> Best regards,
>>>>>>>> Maxim
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>
>>>>> --
>>>>> Best regards,
>>>>> Maxim
>>>>>
>>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
>>
Re: change password encoding MD5
Posted by Juan Antonio Moreno Carmona <ja...@gmail.com>.
Neither to me. I think the information about custom encryption is at the
link below.
https://openmeetings.apache.org/CustomCryptMechanism.html#configuration-of-custom-crypt-style1
El 19/4/20 a las 12:16, Daniel Baker escribió:
>
> Not for me :
>
>
> On 19/04/2020 10:32, Maxim Solodovnik wrote:
>> Works for me
>> Can anyone else check?
>>
>> On Sun, Apr 19, 2020, 15:01 K. Kamhamea <kamhamea@googlemail.com
>> <ma...@googlemail.com>> wrote:
>>
>> This link doesn't work either. Got a 404
>> :-(
>>
>> Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik
>> <solomax666@gmail.com <ma...@gmail.com>>:
>>
>> forget the link https://github.com/openmeetings/custom-crypt
>>
>> On Sun, 19 Apr 2020 at 00:30, K. Kamhamea
>> <kamhamea@googlemail.com <ma...@googlemail.com>> wrote:
>>
>> ???
>> Where is the example?
>>
>> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim
>> Solodovnik <solomax666@gmail.com
>> <ma...@gmail.com>>:
>>
>> Here is the example
>>
>> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea
>> <kamhamea@googlemail.com
>> <ma...@googlemail.com>> wrote:
>>
>> You're right. I'm using M3, but according the
>> website
>> (https://openmeetings.apache.org/downloads.html)
>> it is the "Latest Official WebRTC Release" :-)
>> Best K.
>>
>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb
>> <info@bureau-de-poste.net
>> <ma...@bureau-de-poste.net>>:
>>
>> Hello,
>>
>> About all this work you are doing on the
>> manual, I hope you are making a manual for
>> the current M4 and not M3 - as some of the
>> symbols have changed, etc.
>>
>> Best regards,
>>
>> Ed
>>
>>
>> Quoting "K. Kamhamea"
>> <kamhamea@googlemail.com
>> <ma...@googlemail.com>>:
>>
>>> You are right we should not invest to much
>>> time and efforts here. It is rather a
>>> negligibility. I just want to keep the
>>> manual as detailed as possible. But there
>>> are many other more pressing things to
>>> solve. I will create a new thread for that.
>>> K.
>>>
>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb
>>> Maxim Solodovnik <solomax666@gmail.com
>>> <ma...@gmail.com>>:
>>>
>>> I can create example project for this
>>> (please ping me if i will be too silent)
>>> According to MD5 as password hash
>>> function: this is bad idea
>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>
>>> On Sat, 18 Apr 2020 at 02:42, K.
>>> Kamhamea <kamhamea@googlemail.com
>>> <ma...@googlemail.com>> wrote:
>>>
>>> OMG. I'm not experienced with Java.
>>> We are doing python mostly and
>>> Javascript and rarely some C++ but
>>> never Java.
>>> I tried to compile your
>>> MD5implementation file
>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>> but it failed because of missing
>>> dependencies. It probably requires
>>> the whole source of the project
>>> being downloaded and properly installed.
>>> So for the moment I decided I
>>> wouldn't spend my time to test all
>>> this I'm just going to copy your
>>> detailed instruction into the Manual.
>>> The reason why I was so interested
>>> in this topic is because of
>>> compatibility problems. I haven't
>>> found yet a python encryption
>>> library that is compatible. By
>>> contrast, MD5 is a standard that is
>>> widely used.
>>> Thank you again so much for your help
>>> K.
>>>
>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr
>>> schrieb Maxim Solodovnik
>>> <solomax666@gmail.com
>>> <ma...@gmail.com>>:
>>>
>>>
>>> On Fri, 17 Apr 2020 at 18:54, K.
>>> Kamhamea
>>> <kamhamea@googlemail.com
>>> <ma...@googlemail.com>>
>>> wrote:
>>>
>>> I was just about testing
>>> other encryption methods as
>>> described
>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>
>>> I doubt anyone ever try this :)
>>>
>>> Here I run into the
>>> following undocumented problems
>>> 1. Where to copy the
>>> MD5Implementation.java
>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>> file into my file system
>>>
>>> This is basic JAVA question :)
>>> Java programs need to be compiled
>>> i.e. After you have created
>>> class (which MUST implement
>>> interface) you need to
>>> 1) compile this class
>>> 2) Pack into JAR file
>>> 3) Put jar to
>>> webapps/openmeetings/WEB-INF/lib
>>>
>>> 2. How to set the CLASSPATH
>>> so that it can be found
>>> anywhere in my filesystem
>>>
>>> jars
>>> from webapps/openmeetings/WEB-INF/lib
>>> are being loaded automatically
>>>
>>> 3. What is actually the text
>>> string to be added into the
>>> configuration variable "
>>> |crypt.class.name
>>> <http://crypt.class.name>| "
>>>
>>> In JAVA classes are usually
>>> being created in packages (to
>>> resolve possible name clashes)
>>> so You need to write something like:
>>> package com.googlemail.kamhamea;
>>> public class
>>> MySecureCryptProvider implements
>>> ICrypt {
>>> ........your secure algorithm
>>> here ..........
>>> }
>>> In config value you should
>>> write:
>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>
>>> Alternatively I tried this class
>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>> But changing the
>>> configuration variable to "
>>> org.apache.openmeetings.util.crypt.MD5
>>> " creates but an error.
>>>
>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>> Can't be used due to it doesn't
>>> implements ICrypt
>>>
>>> Best K.
>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
>>
>>
>>
>>
>> --
>> Best regards,
>> Maxim
>>
>>
>>
>> --
>> Best regards,
>> Maxim
>>
Re: change password encoding MD5
Posted by Daniel Baker <in...@collisiondetection.biz>.
Not for me :
On 19/04/2020 10:32, Maxim Solodovnik wrote:
> Works for me
> Can anyone else check?
>
> On Sun, Apr 19, 2020, 15:01 K. Kamhamea <kamhamea@googlemail.com
> <ma...@googlemail.com>> wrote:
>
> This link doesn't work either. Got a 404
> :-(
>
> Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik
> <solomax666@gmail.com <ma...@gmail.com>>:
>
> forget the link https://github.com/openmeetings/custom-crypt
>
> On Sun, 19 Apr 2020 at 00:30, K. Kamhamea
> <kamhamea@googlemail.com <ma...@googlemail.com>> wrote:
>
> ???
> Where is the example?
>
> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim
> Solodovnik <solomax666@gmail.com
> <ma...@gmail.com>>:
>
> Here is the example
>
> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea
> <kamhamea@googlemail.com
> <ma...@googlemail.com>> wrote:
>
> You're right. I'm using M3, but according the
> website
> (https://openmeetings.apache.org/downloads.html)
> it is the "Latest Official WebRTC Release" :-)
> Best K.
>
> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb
> <info@bureau-de-poste.net
> <ma...@bureau-de-poste.net>>:
>
> Hello,
>
> About all this work you are doing on the
> manual, I hope you are making a manual for
> the current M4 and not M3 - as some of the
> symbols have changed, etc.
>
> Best regards,
>
> Ed
>
>
> Quoting "K. Kamhamea" <kamhamea@googlemail.com
> <ma...@googlemail.com>>:
>
>> You are right we should not invest to much
>> time and efforts here. It is rather a
>> negligibility. I just want to keep the manual
>> as detailed as possible. But there are many
>> other more pressing things to solve. I will
>> create a new thread for that.
>> K.
>>
>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb
>> Maxim Solodovnik <solomax666@gmail.com
>> <ma...@gmail.com>>:
>>
>> I can create example project for this
>> (please ping me if i will be too silent)
>> According to MD5 as password hash
>> function: this is bad idea
>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>
>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea
>> <kamhamea@googlemail.com
>> <ma...@googlemail.com>> wrote:
>>
>> OMG. I'm not experienced with Java.
>> We are doing python mostly and
>> Javascript and rarely some C++ but
>> never Java.
>> I tried to compile your
>> MD5implementation file
>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>> but it failed because of missing
>> dependencies. It probably requires
>> the whole source of the project being
>> downloaded and properly installed.
>> So for the moment I decided I
>> wouldn't spend my time to test all
>> this I'm just going to copy your
>> detailed instruction into the Manual.
>> The reason why I was so interested in
>> this topic is because of
>> compatibility problems. I haven't
>> found yet a python encryption library
>> that is compatible. By contrast, MD5
>> is a standard that is widely used.
>> Thank you again so much for your help
>> K.
>>
>> Am Fr., 17. Apr. 2020 um 16:15 Uhr
>> schrieb Maxim Solodovnik
>> <solomax666@gmail.com
>> <ma...@gmail.com>>:
>>
>>
>> On Fri, 17 Apr 2020 at 18:54, K.
>> Kamhamea <kamhamea@googlemail.com
>> <ma...@googlemail.com>>
>> wrote:
>>
>> I was just about testing
>> other encryption methods as
>> described
>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>
>> I doubt anyone ever try this :)
>>
>> Here I run into the following
>> undocumented problems
>> 1. Where to copy the
>> MD5Implementation.java
>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>> file into my file system
>>
>> This is basic JAVA question :)
>> Java programs need to be compiled
>> i.e. After you have created class
>> (which MUST implement interface)
>> you need to
>> 1) compile this class
>> 2) Pack into JAR file
>> 3) Put jar to
>> webapps/openmeetings/WEB-INF/lib
>>
>> 2. How to set the CLASSPATH
>> so that it can be found
>> anywhere in my filesystem
>>
>> jars
>> from webapps/openmeetings/WEB-INF/lib
>> are being loaded automatically
>>
>> 3. What is actually the text
>> string to be added into the
>> configuration variable "
>> |crypt.class.name
>> <http://crypt.class.name>| "
>>
>> In JAVA classes are usually being
>> created in packages (to resolve
>> possible name clashes)
>> so You need to write something like:
>> package com.googlemail.kamhamea;
>> public class
>> MySecureCryptProvider implements
>> ICrypt {
>> ........your secure algorithm
>> here ..........
>> }
>> In config value you should write:
>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>
>> Alternatively I tried this class
>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>> But changing the
>> configuration variable to "
>> org.apache.openmeetings.util.crypt.MD5
>> " creates but an error.
>>
>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>> Can't be used due to it doesn't
>> implements ICrypt
>>
>> Best K.
>>
>>
>> --
>> Best regards,
>> Maxim
>>
>>
>> --
>> Best regards,
>> Maxim
>>
>
>
>
>
> --
> Best regards,
> Maxim
>
>
>
> --
> Best regards,
> Maxim
>
Re: change password encoding MD5
Posted by Maxim Solodovnik <so...@gmail.com>.
Works for me
Can anyone else check?
On Sun, Apr 19, 2020, 15:01 K. Kamhamea <ka...@googlemail.com> wrote:
> This link doesn't work either. Got a 404
> :-(
>
> Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik <
> solomax666@gmail.com>:
>
>> forget the link https://github.com/openmeetings/custom-crypt
>>
>> On Sun, 19 Apr 2020 at 00:30, K. Kamhamea <ka...@googlemail.com>
>> wrote:
>>
>>> ???
>>> Where is the example?
>>>
>>> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim Solodovnik <
>>> solomax666@gmail.com>:
>>>
>>>> Here is the example
>>>>
>>>> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <ka...@googlemail.com>
>>>> wrote:
>>>>
>>>>> You're right. I'm using M3, but according the website (
>>>>> https://openmeetings.apache.org/downloads.html) it is the "Latest
>>>>> Official WebRTC Release" :-)
>>>>> Best K.
>>>>>
>>>>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <in...@bureau-de-poste.net>:
>>>>>
>>>>>> Hello,
>>>>>>
>>>>>> About all this work you are doing on the manual, I hope you are
>>>>>> making a manual for the current M4 and not M3 - as some of the symbols
>>>>>> have changed, etc.
>>>>>>
>>>>>> Best regards,
>>>>>>
>>>>>> Ed
>>>>>>
>>>>>>
>>>>>> Quoting "K. Kamhamea" <ka...@googlemail.com>:
>>>>>>
>>>>>> You are right we should not invest to much time and efforts here. It
>>>>>> is rather a negligibility. I just want to keep the manual as detailed as
>>>>>> possible. But there are many other more pressing things to solve. I will
>>>>>> create a new thread for that.
>>>>>> K.
>>>>>>
>>>>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
>>>>>> solomax666@gmail.com>:
>>>>>>
>>>>>>> I can create example project for this (please ping me if i will be
>>>>>>> too silent)
>>>>>>>
>>>>>>> According to MD5 as password hash function: this is bad idea
>>>>>>>
>>>>>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>>>>>
>>>>>>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>>>>>>> Javascript and rarely some C++ but never Java.
>>>>>>>>
>>>>>>>> I tried to compile your MD5implementation file
>>>>>>>>
>>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>>>>>>> but it failed because of missing dependencies. It probably requires
>>>>>>>> the whole source of the project being downloaded and properly installed.
>>>>>>>> So for the moment I decided I wouldn't spend my time to test all
>>>>>>>> this I'm just going to copy your detailed instruction into the Manual.
>>>>>>>>
>>>>>>>> The reason why I was so interested in this topic is because of
>>>>>>>> compatibility problems. I haven't found yet a python encryption library
>>>>>>>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>>>>>>>
>>>>>>>> Thank you again so much for your help
>>>>>>>> K.
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>>>>>>>> solomax666@gmail.com>:
>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>>>>>>>>> wrote:
>>>>>>>>>
>>>>>>>>>> I was just about testing other encryption methods as described
>>>>>>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>> I doubt anyone ever try this :)
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Here I run into the following undocumented problems
>>>>>>>>>> 1. Where to copy the MD5Implementation.java
>>>>>>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>>>>>>>> file into my file system
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>> This is basic JAVA question :)
>>>>>>>>> Java programs need to be compiled
>>>>>>>>> i.e. After you have created class (which MUST implement interface)
>>>>>>>>> you need to
>>>>>>>>> 1) compile this class
>>>>>>>>> 2) Pack into JAR file
>>>>>>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in
>>>>>>>>>> my filesystem
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
>>>>>>>>> automatically
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>> 3. What is actually the text string to be added into the
>>>>>>>>>> configuration variable " crypt.class.name "
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>> In JAVA classes are usually being created in packages (to resolve
>>>>>>>>> possible name clashes)
>>>>>>>>> so You need to write something like:
>>>>>>>>>
>>>>>>>>> package com.googlemail.kamhamea;
>>>>>>>>>
>>>>>>>>> public class MySecureCryptProvider implements ICrypt {
>>>>>>>>> ........your secure algorithm here ..........
>>>>>>>>> }
>>>>>>>>>
>>>>>>>>> In config value you should write:
>>>>>>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Alternatively I tried this class
>>>>>>>>>>
>>>>>>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>>>>>>
>>>>>>>>>> But changing the configuration variable to "
>>>>>>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>>>>>>> Can't be used due to it doesn't implements ICrypt
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Best K.
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> Best regards,
>>>>>>>>> Maxim
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> Best regards,
>>>>>>> Maxim
>>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>
>>>> --
>>>> Best regards,
>>>> Maxim
>>>>
>>>
>>
>> --
>> Best regards,
>> Maxim
>>
>
Re: change password encoding MD5
Posted by "K. Kamhamea" <ka...@googlemail.com>.
This link doesn't work either. Got a 404
:-(
Am So., 19. Apr. 2020 um 02:47 Uhr schrieb Maxim Solodovnik <
solomax666@gmail.com>:
> forget the link https://github.com/openmeetings/custom-crypt
>
> On Sun, 19 Apr 2020 at 00:30, K. Kamhamea <ka...@googlemail.com> wrote:
>
>> ???
>> Where is the example?
>>
>> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim Solodovnik <
>> solomax666@gmail.com>:
>>
>>> Here is the example
>>>
>>> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <ka...@googlemail.com>
>>> wrote:
>>>
>>>> You're right. I'm using M3, but according the website (
>>>> https://openmeetings.apache.org/downloads.html) it is the "Latest
>>>> Official WebRTC Release" :-)
>>>> Best K.
>>>>
>>>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <in...@bureau-de-poste.net>:
>>>>
>>>>> Hello,
>>>>>
>>>>> About all this work you are doing on the manual, I hope you are making
>>>>> a manual for the current M4 and not M3 - as some of the symbols have
>>>>> changed, etc.
>>>>>
>>>>> Best regards,
>>>>>
>>>>> Ed
>>>>>
>>>>>
>>>>> Quoting "K. Kamhamea" <ka...@googlemail.com>:
>>>>>
>>>>> You are right we should not invest to much time and efforts here. It
>>>>> is rather a negligibility. I just want to keep the manual as detailed as
>>>>> possible. But there are many other more pressing things to solve. I will
>>>>> create a new thread for that.
>>>>> K.
>>>>>
>>>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
>>>>> solomax666@gmail.com>:
>>>>>
>>>>>> I can create example project for this (please ping me if i will be
>>>>>> too silent)
>>>>>>
>>>>>> According to MD5 as password hash function: this is bad idea
>>>>>>
>>>>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>>>>
>>>>>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
>>>>>> wrote:
>>>>>>
>>>>>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>>>>>> Javascript and rarely some C++ but never Java.
>>>>>>>
>>>>>>> I tried to compile your MD5implementation file
>>>>>>>
>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>>>>>> but it failed because of missing dependencies. It probably requires
>>>>>>> the whole source of the project being downloaded and properly installed.
>>>>>>> So for the moment I decided I wouldn't spend my time to test all
>>>>>>> this I'm just going to copy your detailed instruction into the Manual.
>>>>>>>
>>>>>>> The reason why I was so interested in this topic is because of
>>>>>>> compatibility problems. I haven't found yet a python encryption library
>>>>>>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>>>>>>
>>>>>>> Thank you again so much for your help
>>>>>>> K.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>>>>>>> solomax666@gmail.com>:
>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>> I was just about testing other encryption methods as described
>>>>>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>>>>>>
>>>>>>>>
>>>>>>>> I doubt anyone ever try this :)
>>>>>>>>
>>>>>>>>
>>>>>>>>>
>>>>>>>>> Here I run into the following undocumented problems
>>>>>>>>> 1. Where to copy the MD5Implementation.java
>>>>>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>>>>>>> file into my file system
>>>>>>>>>
>>>>>>>>
>>>>>>>> This is basic JAVA question :)
>>>>>>>> Java programs need to be compiled
>>>>>>>> i.e. After you have created class (which MUST implement interface)
>>>>>>>> you need to
>>>>>>>> 1) compile this class
>>>>>>>> 2) Pack into JAR file
>>>>>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>>>>>
>>>>>>>>
>>>>>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>>>>>>>>> filesystem
>>>>>>>>>
>>>>>>>>
>>>>>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
>>>>>>>> automatically
>>>>>>>>
>>>>>>>>
>>>>>>>>> 3. What is actually the text string to be added into the
>>>>>>>>> configuration variable " crypt.class.name "
>>>>>>>>>
>>>>>>>>
>>>>>>>> In JAVA classes are usually being created in packages (to resolve
>>>>>>>> possible name clashes)
>>>>>>>> so You need to write something like:
>>>>>>>>
>>>>>>>> package com.googlemail.kamhamea;
>>>>>>>>
>>>>>>>> public class MySecureCryptProvider implements ICrypt {
>>>>>>>> ........your secure algorithm here ..........
>>>>>>>> }
>>>>>>>>
>>>>>>>> In config value you should write:
>>>>>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>>
>>>>>>>>> Alternatively I tried this class
>>>>>>>>>
>>>>>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>>>>>
>>>>>>>>> But changing the configuration variable to "
>>>>>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>>>>>> Can't be used due to it doesn't implements ICrypt
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>>
>>>>>>>>> Best K.
>>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> Best regards,
>>>>>>>> Maxim
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>> --
>>>>>> Best regards,
>>>>>> Maxim
>>>>>>
>>>>>
>>>>>
>>>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
>>
>
> --
> Best regards,
> Maxim
>
Re: change password encoding MD5
Posted by Maxim Solodovnik <so...@gmail.com>.
forget the link https://github.com/openmeetings/custom-crypt
On Sun, 19 Apr 2020 at 00:30, K. Kamhamea <ka...@googlemail.com> wrote:
> ???
> Where is the example?
>
> Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim Solodovnik <
> solomax666@gmail.com>:
>
>> Here is the example
>>
>> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <ka...@googlemail.com>
>> wrote:
>>
>>> You're right. I'm using M3, but according the website (
>>> https://openmeetings.apache.org/downloads.html) it is the "Latest
>>> Official WebRTC Release" :-)
>>> Best K.
>>>
>>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <in...@bureau-de-poste.net>:
>>>
>>>> Hello,
>>>>
>>>> About all this work you are doing on the manual, I hope you are making
>>>> a manual for the current M4 and not M3 - as some of the symbols have
>>>> changed, etc.
>>>>
>>>> Best regards,
>>>>
>>>> Ed
>>>>
>>>>
>>>> Quoting "K. Kamhamea" <ka...@googlemail.com>:
>>>>
>>>> You are right we should not invest to much time and efforts here. It is
>>>> rather a negligibility. I just want to keep the manual as detailed as
>>>> possible. But there are many other more pressing things to solve. I will
>>>> create a new thread for that.
>>>> K.
>>>>
>>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
>>>> solomax666@gmail.com>:
>>>>
>>>>> I can create example project for this (please ping me if i will be too
>>>>> silent)
>>>>>
>>>>> According to MD5 as password hash function: this is bad idea
>>>>>
>>>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>>>
>>>>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
>>>>> wrote:
>>>>>
>>>>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>>>>> Javascript and rarely some C++ but never Java.
>>>>>>
>>>>>> I tried to compile your MD5implementation file
>>>>>>
>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>>>>> but it failed because of missing dependencies. It probably requires
>>>>>> the whole source of the project being downloaded and properly installed.
>>>>>> So for the moment I decided I wouldn't spend my time to test all this
>>>>>> I'm just going to copy your detailed instruction into the Manual.
>>>>>>
>>>>>> The reason why I was so interested in this topic is because of
>>>>>> compatibility problems. I haven't found yet a python encryption library
>>>>>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>>>>>
>>>>>> Thank you again so much for your help
>>>>>> K.
>>>>>>
>>>>>>
>>>>>>
>>>>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>>>>>> solomax666@gmail.com>:
>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> I was just about testing other encryption methods as described
>>>>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>>>>>
>>>>>>>
>>>>>>> I doubt anyone ever try this :)
>>>>>>>
>>>>>>>
>>>>>>>>
>>>>>>>> Here I run into the following undocumented problems
>>>>>>>> 1. Where to copy the MD5Implementation.java
>>>>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>>>>>> file into my file system
>>>>>>>>
>>>>>>>
>>>>>>> This is basic JAVA question :)
>>>>>>> Java programs need to be compiled
>>>>>>> i.e. After you have created class (which MUST implement interface)
>>>>>>> you need to
>>>>>>> 1) compile this class
>>>>>>> 2) Pack into JAR file
>>>>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>>>>
>>>>>>>
>>>>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>>>>>>>> filesystem
>>>>>>>>
>>>>>>>
>>>>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
>>>>>>> automatically
>>>>>>>
>>>>>>>
>>>>>>>> 3. What is actually the text string to be added into the
>>>>>>>> configuration variable " crypt.class.name "
>>>>>>>>
>>>>>>>
>>>>>>> In JAVA classes are usually being created in packages (to resolve
>>>>>>> possible name clashes)
>>>>>>> so You need to write something like:
>>>>>>>
>>>>>>> package com.googlemail.kamhamea;
>>>>>>>
>>>>>>> public class MySecureCryptProvider implements ICrypt {
>>>>>>> ........your secure algorithm here ..........
>>>>>>> }
>>>>>>>
>>>>>>> In config value you should write:
>>>>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>
>>>>>>>> Alternatively I tried this class
>>>>>>>>
>>>>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>>>>
>>>>>>>> But changing the configuration variable to "
>>>>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>>>>> Can't be used due to it doesn't implements ICrypt
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>>
>>>>>>>> Best K.
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> Best regards,
>>>>>>> Maxim
>>>>>>>
>>>>>>
>>>>>
>>>>> --
>>>>> Best regards,
>>>>> Maxim
>>>>>
>>>>
>>>>
>>>>
>>
>> --
>> Best regards,
>> Maxim
>>
>
--
Best regards,
Maxim
Re: change password encoding MD5
Posted by "K. Kamhamea" <ka...@googlemail.com>.
???
Where is the example?
Am Sa., 18. Apr. 2020 um 19:07 Uhr schrieb Maxim Solodovnik <
solomax666@gmail.com>:
> Here is the example
>
> On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <ka...@googlemail.com> wrote:
>
>> You're right. I'm using M3, but according the website (
>> https://openmeetings.apache.org/downloads.html) it is the "Latest
>> Official WebRTC Release" :-)
>> Best K.
>>
>> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <in...@bureau-de-poste.net>:
>>
>>> Hello,
>>>
>>> About all this work you are doing on the manual, I hope you are making a
>>> manual for the current M4 and not M3 - as some of the symbols have
>>> changed, etc.
>>>
>>> Best regards,
>>>
>>> Ed
>>>
>>>
>>> Quoting "K. Kamhamea" <ka...@googlemail.com>:
>>>
>>> You are right we should not invest to much time and efforts here. It is
>>> rather a negligibility. I just want to keep the manual as detailed as
>>> possible. But there are many other more pressing things to solve. I will
>>> create a new thread for that.
>>> K.
>>>
>>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
>>> solomax666@gmail.com>:
>>>
>>>> I can create example project for this (please ping me if i will be too
>>>> silent)
>>>>
>>>> According to MD5 as password hash function: this is bad idea
>>>>
>>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>>
>>>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
>>>> wrote:
>>>>
>>>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>>>> Javascript and rarely some C++ but never Java.
>>>>>
>>>>> I tried to compile your MD5implementation file
>>>>>
>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>>>> but it failed because of missing dependencies. It probably requires
>>>>> the whole source of the project being downloaded and properly installed.
>>>>> So for the moment I decided I wouldn't spend my time to test all this
>>>>> I'm just going to copy your detailed instruction into the Manual.
>>>>>
>>>>> The reason why I was so interested in this topic is because of
>>>>> compatibility problems. I haven't found yet a python encryption library
>>>>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>>>>
>>>>> Thank you again so much for your help
>>>>> K.
>>>>>
>>>>>
>>>>>
>>>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>>>>> solomax666@gmail.com>:
>>>>>
>>>>>>
>>>>>>
>>>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>>>>>> wrote:
>>>>>>
>>>>>>> I was just about testing other encryption methods as described
>>>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>>>>
>>>>>>
>>>>>> I doubt anyone ever try this :)
>>>>>>
>>>>>>
>>>>>>>
>>>>>>> Here I run into the following undocumented problems
>>>>>>> 1. Where to copy the MD5Implementation.java
>>>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>>>>> file into my file system
>>>>>>>
>>>>>>
>>>>>> This is basic JAVA question :)
>>>>>> Java programs need to be compiled
>>>>>> i.e. After you have created class (which MUST implement interface)
>>>>>> you need to
>>>>>> 1) compile this class
>>>>>> 2) Pack into JAR file
>>>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>>>
>>>>>>
>>>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>>>>>>> filesystem
>>>>>>>
>>>>>>
>>>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
>>>>>> automatically
>>>>>>
>>>>>>
>>>>>>> 3. What is actually the text string to be added into the
>>>>>>> configuration variable " crypt.class.name "
>>>>>>>
>>>>>>
>>>>>> In JAVA classes are usually being created in packages (to resolve
>>>>>> possible name clashes)
>>>>>> so You need to write something like:
>>>>>>
>>>>>> package com.googlemail.kamhamea;
>>>>>>
>>>>>> public class MySecureCryptProvider implements ICrypt {
>>>>>> ........your secure algorithm here ..........
>>>>>> }
>>>>>>
>>>>>> In config value you should write:
>>>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>>>
>>>>>>
>>>>>>
>>>>>>>
>>>>>>> Alternatively I tried this class
>>>>>>>
>>>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>>>
>>>>>>> But changing the configuration variable to "
>>>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>>>>
>>>>>>
>>>>>>
>>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>>>> Can't be used due to it doesn't implements ICrypt
>>>>>>
>>>>>>
>>>>>>
>>>>>>>
>>>>>>> Best K.
>>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Best regards,
>>>>>> Maxim
>>>>>>
>>>>>
>>>>
>>>> --
>>>> Best regards,
>>>> Maxim
>>>>
>>>
>>>
>>>
>
> --
> Best regards,
> Maxim
>
Re: change password encoding MD5
Posted by Maxim Solodovnik <so...@gmail.com>.
Here is the example
On Sat, 18 Apr 2020 at 19:24, K. Kamhamea <ka...@googlemail.com> wrote:
> You're right. I'm using M3, but according the website (
> https://openmeetings.apache.org/downloads.html) it is the "Latest
> Official WebRTC Release" :-)
> Best K.
>
> Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <in...@bureau-de-poste.net>:
>
>> Hello,
>>
>> About all this work you are doing on the manual, I hope you are making a
>> manual for the current M4 and not M3 - as some of the symbols have
>> changed, etc.
>>
>> Best regards,
>>
>> Ed
>>
>>
>> Quoting "K. Kamhamea" <ka...@googlemail.com>:
>>
>> You are right we should not invest to much time and efforts here. It is
>> rather a negligibility. I just want to keep the manual as detailed as
>> possible. But there are many other more pressing things to solve. I will
>> create a new thread for that.
>> K.
>>
>> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
>> solomax666@gmail.com>:
>>
>>> I can create example project for this (please ping me if i will be too
>>> silent)
>>>
>>> According to MD5 as password hash function: this is bad idea
>>>
>>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>>
>>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
>>> wrote:
>>>
>>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>>> Javascript and rarely some C++ but never Java.
>>>>
>>>> I tried to compile your MD5implementation file
>>>>
>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>>> but it failed because of missing dependencies. It probably requires the
>>>> whole source of the project being downloaded and properly installed.
>>>> So for the moment I decided I wouldn't spend my time to test all this
>>>> I'm just going to copy your detailed instruction into the Manual.
>>>>
>>>> The reason why I was so interested in this topic is because of
>>>> compatibility problems. I haven't found yet a python encryption library
>>>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>>>
>>>> Thank you again so much for your help
>>>> K.
>>>>
>>>>
>>>>
>>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>>>> solomax666@gmail.com>:
>>>>
>>>>>
>>>>>
>>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>>>>> wrote:
>>>>>
>>>>>> I was just about testing other encryption methods as described
>>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>>>
>>>>>
>>>>> I doubt anyone ever try this :)
>>>>>
>>>>>
>>>>>>
>>>>>> Here I run into the following undocumented problems
>>>>>> 1. Where to copy the MD5Implementation.java
>>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>>>> file into my file system
>>>>>>
>>>>>
>>>>> This is basic JAVA question :)
>>>>> Java programs need to be compiled
>>>>> i.e. After you have created class (which MUST implement interface) you
>>>>> need to
>>>>> 1) compile this class
>>>>> 2) Pack into JAR file
>>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>>
>>>>>
>>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>>>>>> filesystem
>>>>>>
>>>>>
>>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
>>>>> automatically
>>>>>
>>>>>
>>>>>> 3. What is actually the text string to be added into the
>>>>>> configuration variable " crypt.class.name "
>>>>>>
>>>>>
>>>>> In JAVA classes are usually being created in packages (to resolve
>>>>> possible name clashes)
>>>>> so You need to write something like:
>>>>>
>>>>> package com.googlemail.kamhamea;
>>>>>
>>>>> public class MySecureCryptProvider implements ICrypt {
>>>>> ........your secure algorithm here ..........
>>>>> }
>>>>>
>>>>> In config value you should write:
>>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>>
>>>>>
>>>>>
>>>>>>
>>>>>> Alternatively I tried this class
>>>>>>
>>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>>
>>>>>> But changing the configuration variable to "
>>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>>>
>>>>>
>>>>>
>>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>>> Can't be used due to it doesn't implements ICrypt
>>>>>
>>>>>
>>>>>
>>>>>>
>>>>>> Best K.
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Best regards,
>>>>> Maxim
>>>>>
>>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
>>
>>
>>
--
Best regards,
Maxim
Re: change password encoding MD5
Posted by "K. Kamhamea" <ka...@googlemail.com>.
You're right. I'm using M3, but according the website (
https://openmeetings.apache.org/downloads.html) it is the "Latest Official
WebRTC Release" :-)
Best K.
Am Sa., 18. Apr. 2020 um 13:56 Uhr schrieb <in...@bureau-de-poste.net>:
> Hello,
>
> About all this work you are doing on the manual, I hope you are making a
> manual for the current M4 and not M3 - as some of the symbols have
> changed, etc.
>
> Best regards,
>
> Ed
>
>
> Quoting "K. Kamhamea" <ka...@googlemail.com>:
>
> You are right we should not invest to much time and efforts here. It is
> rather a negligibility. I just want to keep the manual as detailed as
> possible. But there are many other more pressing things to solve. I will
> create a new thread for that.
> K.
>
> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
> solomax666@gmail.com>:
>
>> I can create example project for this (please ping me if i will be too
>> silent)
>>
>> According to MD5 as password hash function: this is bad idea
>>
>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>
>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com>
>> wrote:
>>
>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>> Javascript and rarely some C++ but never Java.
>>>
>>> I tried to compile your MD5implementation file
>>>
>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>> but it failed because of missing dependencies. It probably requires the
>>> whole source of the project being downloaded and properly installed.
>>> So for the moment I decided I wouldn't spend my time to test all this
>>> I'm just going to copy your detailed instruction into the Manual.
>>>
>>> The reason why I was so interested in this topic is because of
>>> compatibility problems. I haven't found yet a python encryption library
>>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>>
>>> Thank you again so much for your help
>>> K.
>>>
>>>
>>>
>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>>> solomax666@gmail.com>:
>>>
>>>>
>>>>
>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>>>> wrote:
>>>>
>>>>> I was just about testing other encryption methods as described
>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>>
>>>>
>>>> I doubt anyone ever try this :)
>>>>
>>>>
>>>>>
>>>>> Here I run into the following undocumented problems
>>>>> 1. Where to copy the MD5Implementation.java
>>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>>> file into my file system
>>>>>
>>>>
>>>> This is basic JAVA question :)
>>>> Java programs need to be compiled
>>>> i.e. After you have created class (which MUST implement interface) you
>>>> need to
>>>> 1) compile this class
>>>> 2) Pack into JAR file
>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>
>>>>
>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>>>>> filesystem
>>>>>
>>>>
>>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded
>>>> automatically
>>>>
>>>>
>>>>> 3. What is actually the text string to be added into the configuration
>>>>> variable " crypt.class.name "
>>>>>
>>>>
>>>> In JAVA classes are usually being created in packages (to resolve
>>>> possible name clashes)
>>>> so You need to write something like:
>>>>
>>>> package com.googlemail.kamhamea;
>>>>
>>>> public class MySecureCryptProvider implements ICrypt {
>>>> ........your secure algorithm here ..........
>>>> }
>>>>
>>>> In config value you should write:
>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>
>>>>
>>>>
>>>>>
>>>>> Alternatively I tried this class
>>>>>
>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>
>>>>> But changing the configuration variable to "
>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>>
>>>>
>>>>
>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>> Can't be used due to it doesn't implements ICrypt
>>>>
>>>>
>>>>
>>>>>
>>>>> Best K.
>>>>>
>>>>
>>>>
>>>> --
>>>> Best regards,
>>>> Maxim
>>>>
>>>
>>
>> --
>> Best regards,
>> Maxim
>>
>
>
>
Re: change password encoding MD5
Posted by in...@bureau-de-poste.net.
Hello,
About all this work you are doing on the manual, I hope you are making
a manual for the current M4 and not M3 - as some of the symbols have
changed, etc.
Best regards,
Ed
Quoting "K. Kamhamea" <ka...@googlemail.com>:
> You are right we should not invest to much time and efforts here. It
> is rather a negligibility. I just want to keep the manual as
> detailed as possible. But there are many other more pressing things
> to solve. I will create a new thread for that.
> K.
>
> Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik
> <so...@gmail.com>:
>
>> I can create example project for this (please ping me if i will be
>> too silent)
>> According to MD5 as password hash function: this is bad idea
>>
>> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>>
>> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea
>> <ka...@googlemail.com> wrote:
>>
>>> OMG. I'm not experienced with Java. We are doing python mostly and
>>> Javascript and rarely some C++ but never Java.
>>>
>>> I tried to compile your MD5implementation file
>>>
>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>>> but it failed because of missing dependencies. It probably
>>> requires the whole source of the project being downloaded and
>>> properly installed.
>>> So for the moment I decided I wouldn't spend my time to
>>> test all this I'm just going to copy your detailed instruction
>>> into the Manual.
>>>
>>> The reason why I was so interested in this topic is
>>> because of compatibility problems. I haven't found yet a python
>>> encryption library that is compatible. By contrast, MD5 is a
>>> standard that is widely used.
>>>
>>> Thank you again so much for your help
>>> K.
>>>
>>>
>>>
>>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim
>>> Solodovnik <so...@gmail.com>:
>>>
>>>>
>>>>
>>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea
>>>> <ka...@googlemail.com> wrote:
>>>>
>>>>> I was just about testing other encryption methods as described
>>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>
>>>>
>>>> I doubt anyone ever try this :)
>>>>
>>>>
>>>>>
>>>>> Here I run into the following undocumented problems
>>>>> 1. Where to copy the MD5Implementation.java[1] file
>>>>> into my file system
>>>>
>>>>
>>>> This is basic JAVA question :)
>>>> Java programs need to be compiled
>>>> i.e. After you have created class (which MUST implement
>>>> interface) you need to
>>>> 1) compile this class
>>>> 2) Pack into JAR file
>>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>>
>>>>
>>>>> 2. How to set the CLASSPATH so that it can be found anywhere in
>>>>> my filesystem
>>>>
>>>>
>>>> jars from webapps/openmeetings/WEB-INF/lib are being
>>>> loaded automatically
>>>>
>>>>
>>>>> 3. What is actually the text string to be added into the
>>>>> configuration variable " crypt.class.name[2] "
>>>>
>>>>
>>>> In JAVA classes are usually being created in packages
>>>> (to resolve possible name clashes)
>>>> so You need to write something like:
>>>>
>>>> package com.googlemail.kamhamea;
>>>>
>>>> public class MySecureCryptProvider implements ICrypt {
>>>> ........your secure algorithm here ..........
>>>> }
>>>>
>>>> In config value you should write:
>>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>>
>>>>
>>>>
>>>>>
>>>>> Alternatively I tried this class
>>>>>
>>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>>
>>>>> But changing the configuration variable to "
>>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>
>>>>
>>>>
>>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>>> Can't be used due to it doesn't implements ICrypt
>>>>
>>>>
>>>>
>>>>>
>>>>> Best K.
>>>>
>>>>
>>>> --
>>>> Best regards,
>>>> Maxim
>>
>>
>> --
>> Best regards,
>> Maxim
Links:
------
[1]
https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
[2] http://crypt.class.name
Re: change password encoding MD5
Posted by "K. Kamhamea" <ka...@googlemail.com>.
You are right we should not invest to much time and efforts here. It is
rather a negligibility. I just want to keep the manual as detailed as
possible. But there are many other more pressing things to solve. I will
create a new thread for that.
K.
Am Sa., 18. Apr. 2020 um 03:31 Uhr schrieb Maxim Solodovnik <
solomax666@gmail.com>:
> I can create example project for this (please ping me if i will be too
> silent)
>
> According to MD5 as password hash function: this is bad idea
>
> https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
>
> On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com> wrote:
>
>> OMG. I'm not experienced with Java. We are doing python mostly and
>> Javascript and rarely some C++ but never Java.
>>
>> I tried to compile your MD5implementation file
>>
>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
>> but it failed because of missing dependencies. It probably requires the
>> whole source of the project being downloaded and properly installed.
>> So for the moment I decided I wouldn't spend my time to test all this I'm
>> just going to copy your detailed instruction into the Manual.
>>
>> The reason why I was so interested in this topic is because of
>> compatibility problems. I haven't found yet a python encryption library
>> that is compatible. By contrast, MD5 is a standard that is widely used.
>>
>> Thank you again so much for your help
>> K.
>>
>>
>>
>> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
>> solomax666@gmail.com>:
>>
>>>
>>>
>>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>>> wrote:
>>>
>>>> I was just about testing other encryption methods as described
>>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>>
>>>
>>> I doubt anyone ever try this :)
>>>
>>>
>>>>
>>>> Here I run into the following undocumented problems
>>>> 1. Where to copy the MD5Implementation.java
>>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>>> file into my file system
>>>>
>>>
>>> This is basic JAVA question :)
>>> Java programs need to be compiled
>>> i.e. After you have created class (which MUST implement interface) you
>>> need to
>>> 1) compile this class
>>> 2) Pack into JAR file
>>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>>
>>>
>>>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>>>> filesystem
>>>>
>>>
>>> jars from webapps/openmeetings/WEB-INF/lib are being loaded automatically
>>>
>>>
>>>> 3. What is actually the text string to be added into the configuration
>>>> variable " crypt.class.name "
>>>>
>>>
>>> In JAVA classes are usually being created in packages (to resolve
>>> possible name clashes)
>>> so You need to write something like:
>>>
>>> package com.googlemail.kamhamea;
>>>
>>> public class MySecureCryptProvider implements ICrypt {
>>> ........your secure algorithm here ..........
>>> }
>>>
>>> In config value you should write:
>>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>>
>>>
>>>
>>>> Alternatively I tried this class
>>>>
>>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>>
>>>> But changing the configuration variable to "
>>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>>
>>>
>>>
>>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>>> Can't be used due to it doesn't implements ICrypt
>>>
>>>
>>>
>>>>
>>>> Best K.
>>>>
>>>
>>>
>>> --
>>> Best regards,
>>> Maxim
>>>
>>
>
> --
> Best regards,
> Maxim
>
Re: change password encoding MD5
Posted by Maxim Solodovnik <so...@gmail.com>.
I can create example project for this (please ping me if i will be too
silent)
According to MD5 as password hash function: this is bad idea
https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function
On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <ka...@googlemail.com> wrote:
> OMG. I'm not experienced with Java. We are doing python mostly and
> Javascript and rarely some C++ but never Java.
>
> I tried to compile your MD5implementation file
>
> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
> but it failed because of missing dependencies. It probably requires the
> whole source of the project being downloaded and properly installed.
> So for the moment I decided I wouldn't spend my time to test all this I'm
> just going to copy your detailed instruction into the Manual.
>
> The reason why I was so interested in this topic is because of
> compatibility problems. I haven't found yet a python encryption library
> that is compatible. By contrast, MD5 is a standard that is widely used.
>
> Thank you again so much for your help
> K.
>
>
>
> Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
> solomax666@gmail.com>:
>
>>
>>
>> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com>
>> wrote:
>>
>>> I was just about testing other encryption methods as described
>>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>>
>>
>> I doubt anyone ever try this :)
>>
>>
>>>
>>> Here I run into the following undocumented problems
>>> 1. Where to copy the MD5Implementation.java
>>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>>> file into my file system
>>>
>>
>> This is basic JAVA question :)
>> Java programs need to be compiled
>> i.e. After you have created class (which MUST implement interface) you
>> need to
>> 1) compile this class
>> 2) Pack into JAR file
>> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>>
>>
>>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>>> filesystem
>>>
>>
>> jars from webapps/openmeetings/WEB-INF/lib are being loaded automatically
>>
>>
>>> 3. What is actually the text string to be added into the configuration
>>> variable " crypt.class.name "
>>>
>>
>> In JAVA classes are usually being created in packages (to resolve
>> possible name clashes)
>> so You need to write something like:
>>
>> package com.googlemail.kamhamea;
>>
>> public class MySecureCryptProvider implements ICrypt {
>> ........your secure algorithm here ..........
>> }
>>
>> In config value you should write:
>> "com.googlemail.kamhamea.MySecureCryptProvider"
>>
>>
>>
>>> Alternatively I tried this class
>>>
>>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>>
>>> But changing the configuration variable to "
>>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>>
>>
>>
>> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
>> Can't be used due to it doesn't implements ICrypt
>>
>>
>>
>>>
>>> Best K.
>>>
>>
>>
>> --
>> Best regards,
>> Maxim
>>
>
--
Best regards,
Maxim
Re: change password encoding MD5
Posted by "K. Kamhamea" <ka...@googlemail.com>.
OMG. I'm not experienced with Java. We are doing python mostly and
Javascript and rarely some C++ but never Java.
I tried to compile your MD5implementation file
https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java
but it failed because of missing dependencies. It probably requires the
whole source of the project being downloaded and properly installed.
So for the moment I decided I wouldn't spend my time to test all this I'm
just going to copy your detailed instruction into the Manual.
The reason why I was so interested in this topic is because of
compatibility problems. I haven't found yet a python encryption library
that is compatible. By contrast, MD5 is a standard that is widely used.
Thank you again so much for your help
K.
Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik <
solomax666@gmail.com>:
>
>
> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com> wrote:
>
>> I was just about testing other encryption methods as described
>> https://openmeetings.apache.org/CustomCryptMechanism.html
>>
>
> I doubt anyone ever try this :)
>
>
>>
>> Here I run into the following undocumented problems
>> 1. Where to copy the MD5Implementation.java
>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
>> file into my file system
>>
>
> This is basic JAVA question :)
> Java programs need to be compiled
> i.e. After you have created class (which MUST implement interface) you
> need to
> 1) compile this class
> 2) Pack into JAR file
> 3) Put jar to webapps/openmeetings/WEB-INF/lib
>
>
>> 2. How to set the CLASSPATH so that it can be found anywhere in my
>> filesystem
>>
>
> jars from webapps/openmeetings/WEB-INF/lib are being loaded automatically
>
>
>> 3. What is actually the text string to be added into the configuration
>> variable " crypt.class.name "
>>
>
> In JAVA classes are usually being created in packages (to resolve possible
> name clashes)
> so You need to write something like:
>
> package com.googlemail.kamhamea;
>
> public class MySecureCryptProvider implements ICrypt {
> ........your secure algorithm here ..........
> }
>
> In config value you should write:
> "com.googlemail.kamhamea.MySecureCryptProvider"
>
>
>
>> Alternatively I tried this class
>>
>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>>
>> But changing the configuration variable to "
>> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>>
>
>
> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
> Can't be used due to it doesn't implements ICrypt
>
>
>
>>
>> Best K.
>>
>
>
> --
> Best regards,
> Maxim
>
Re: change password encoding MD5
Posted by Maxim Solodovnik <so...@gmail.com>.
On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <ka...@googlemail.com> wrote:
> I was just about testing other encryption methods as described
> https://openmeetings.apache.org/CustomCryptMechanism.html
>
I doubt anyone ever try this :)
>
> Here I run into the following undocumented problems
> 1. Where to copy the MD5Implementation.java
> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java>
> file into my file system
>
This is basic JAVA question :)
Java programs need to be compiled
i.e. After you have created class (which MUST implement interface) you need
to
1) compile this class
2) Pack into JAR file
3) Put jar to webapps/openmeetings/WEB-INF/lib
> 2. How to set the CLASSPATH so that it can be found anywhere in my
> filesystem
>
jars from webapps/openmeetings/WEB-INF/lib are being loaded automatically
> 3. What is actually the text string to be added into the configuration
> variable " crypt.class.name "
>
In JAVA classes are usually being created in packages (to resolve possible
name clashes)
so You need to write something like:
package com.googlemail.kamhamea;
public class MySecureCryptProvider implements ICrypt {
........your secure algorithm here ..........
}
In config value you should write:
"com.googlemail.kamhamea.MySecureCryptProvider"
> Alternatively I tried this class
>
> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html
>
> But changing the configuration variable to "
> org.apache.openmeetings.util.crypt.MD5 " creates but an error.
>
https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java
Can't be used due to it doesn't implements ICrypt
>
> Best K.
>
--
Best regards,
Maxim