Alright, I think I have a decent enough solution. I will just mimic fossil's way of storing passwords, which I believe is either in cleartext or a sha1 of the password. Really if someone can get access to the current chisel password hash they can get access to the key as well so it's would be just as easy to run a dictionary attack against as it would on a sha1 hash. This way I can just insert the sha1 in the the fossil db on creation and then also sync across if you change your chisel password. Of course you can always change the password in the repo if you don't want them to match.
On Jul 31, 2010, at 9:54 AM, James Turner wrote: > Right I know, fossil repos are also just sqlite databases, thats how I'm > getting the default password that gets created. My thing is, what password do > I use, like I said I don't store the chisel users password in plain text. I > suppose I could ask for a default password on repo creation so you don't have > to later change it? > > On Jul 31, 2010, at 9:41 AM, Joshua Paine wrote: > >> On 07/31/2010 09:36 AM, James Turner wrote: >>> however I haven't come up with a good way to set the >>> password on newly created repositories without storing user password >>> in cleartext, which I really don't want to do. >> >> You can set the password from the command line, including on an >> arbitrary repo that isn't currently 'open'. See `fossil help user`. Not >> super elegant to integrate into a web app, but very possible. >> >> -- >> Joshua Paine >> LetterBlock: Web applications built with joy >> http://letterblock.com/ >> 301-576-1920 >> _______________________________________________ >> fossil-users mailing list >> [email protected] >> http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users >> > > _______________________________________________ > fossil-users mailing list > [email protected] > http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users > _______________________________________________ fossil-users mailing list [email protected] http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
