summaryrefslogtreecommitdiffhomepage
path: root/src/core/ngx_crypt.c (follow)
AgeCommit message (Collapse)AuthorFilesLines
2013-02-07Added support for {SHA} passwords (ticket #50).Maxim Dounin1-0/+37
Note: use of {SHA} passwords is discouraged as {SHA} password scheme is vulnerable to attacks using rainbow tables. Use of {SSHA}, $apr1$ or crypt() algorithms as supported by OS is recommended instead. The {SHA} password scheme support is added to avoid the need of changing the scheme recorded in password files from {SHA} to {SSHA} because such a change hides security problem with {SHA} passwords. Patch by Louis Opter, with minor changes.
2012-08-16Crypt: fixed handling of corrupted SSHA entries in password file.Maxim Dounin1-2/+9
Found by Coverity.
2012-07-24Fixed compilation with -Wmissing-prototypes.Ruslan Ermilov1-0/+1
2011-05-27fix building on FreeBSD 6 or earlier against system md5Igor Sysoev1-1/+1
2011-05-26fix building --without-http_auth_basic_module,Igor Sysoev1-0/+4
the bug has been introduced in r3923
2011-05-16"$apr1", "{PLAIN}", and "{SSHA}" password methods in auth basic moduleIgor Sysoev1-0/+234
patch by Maxim Dounin