DO NOT REPLY [Bug 32711] New: - due to order of libraries php's crypt refused to use/recognize MD5 salts

[bu...@apache.org]

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=32711>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=32711

           Summary: due to order of libraries php's crypt refused to
                    use/recognize MD5 salts
           Product: Apache httpd-2.0
           Version: 2.0.52
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: All
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: frick@sc-networks.com


while updating a bigger application to apache2/php4.3 and then php5.0, we
noticed, that the crypt function in php refused to handle MD5 salts. this always
resulted in DES crypted strings instead of the proper detection. doing tests
with cli-php and some test.c's showed, that the problem only persists within the
httpd.

after some tests it turned out, that the problem is the load order of the
libraries in httpd to be the culprit. a ``ldd httpd'' showed libcrypto beeing
loaded before libcrypt. after changing the Makefile.in (placing EXTRA_LIBS after
AB_LIBS) the order has changed and the problem is gone now (AB_LIBS contained
the -lcrypt and EXTRA_LIBS contained -lcrypto).

we are not running SSL with this test-server so i can not tell, if there are any
problems resulting on this change (assuming -lcrypto is primarily needed for
openssl).

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org