You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@apr.apache.org by rb...@rkbloom.net on 2004/05/27 18:52:51 UTC

Re: win32: apr_password_validate fails to validate sha1 key generated by htpasswd

One more item for that copious free time that doesn't exist.   :-)
This'll get bumped up my stack of things to do asap.

Ryan

On Thu, 27 May 2004, Stas Bekman wrote:

> I hate to act as a broken phone, but Steve Hay reports that sha1 validation
> fails on win32. Quoting Steve:
>
> --------------
> Running
>
>      C:\apache2\bin>.\htpasswd -nbs user "this is some text"
>
> outputs
>
>      user:{SHA}A5NpTRa4TethLkfOYlK9NfDYbAY=
>
> feeding the two values to apr_password_validate returns mismatch.
> -------------
>
> it works fine on linux. Looks like it's a good time to raise the priority to
> fix apr-util/test/testpass.c to test md5 and sha1 hashes.
>
> And hopefully someone on win32 can check what's going wrong.
>
> --
> __________________________________________________________________
> Stas Bekman            JAm_pH ------> Just Another mod_perl Hacker
> http://stason.org/     mod_perl Guide ---> http://perl.apache.org
> mailto:stas@stason.org http://use.perl.org http://apacheweek.com
> http://modperlbook.org http://apache.org   http://ticketmaster.com
>


Re: win32: apr_password_validate fails to validate sha1 key generated by htpasswd

Posted by Stas Bekman <st...@stason.org>.
rbb@rkbloom.net wrote:
> One more item for that copious free time that doesn't exist.   :-)
> This'll get bumped up my stack of things to do asap.

Thanks Ryan

> On Thu, 27 May 2004, Stas Bekman wrote:
> 
> 
>>I hate to act as a broken phone, but Steve Hay reports that sha1 validation
>>fails on win32. Quoting Steve:
>>
>>--------------
>>Running
>>
>>     C:\apache2\bin>.\htpasswd -nbs user "this is some text"
>>
>>outputs
>>
>>     user:{SHA}A5NpTRa4TethLkfOYlK9NfDYbAY=
>>
>>feeding the two values to apr_password_validate returns mismatch.
>>-------------
>>
>>it works fine on linux. Looks like it's a good time to raise the priority to
>>fix apr-util/test/testpass.c to test md5 and sha1 hashes.
>>
>>And hopefully someone on win32 can check what's going wrong.
>>
>>--
>>__________________________________________________________________
>>Stas Bekman            JAm_pH ------> Just Another mod_perl Hacker
>>http://stason.org/     mod_perl Guide ---> http://perl.apache.org
>>mailto:stas@stason.org http://use.perl.org http://apacheweek.com
>>http://modperlbook.org http://apache.org   http://ticketmaster.com
>>


-- 
__________________________________________________________________
Stas Bekman            JAm_pH ------> Just Another mod_perl Hacker
http://stason.org/     mod_perl Guide ---> http://perl.apache.org
mailto:stas@stason.org http://use.perl.org http://apacheweek.com
http://modperlbook.org http://apache.org   http://ticketmaster.com