Re: OpenSMTPD password encryption scheme.

2018-09-18 Thread Andreas Broecking
Hey, I struggled with this issue as well on FreeBSD. This worked for me after a lot of tracing. 1. Create your PW hash with doveadm: echo `doveadm pw -s BLF-CRYPT` | cut -d'}' -f2 This will cut the {BLF-CRYPT}… header created by doveadm. Opensmtpd uses crypt() to figure out the hash type and

Re: OpenSMTPD password encryption scheme.

2018-09-18 Thread Reio Remma
I'm already using a shared SQL user database between Dovecot and OpenSMTPD, so all is fine in that sense. :) I now actually recall running into the same issue when I was setting the system up - I ended up using smtpctl encrypt to generate the shared passwords. Alas, no way to provide rounds

Re: OpenSMTPD password encryption scheme.

2018-09-18 Thread Reio Remma
On 18.09.2018 19:33, Gilles Chehade wrote: that's an easy one: OpenSMTPD uses the crypt() function provided by your system and does not care about the password scheme used as this is a system-specific detail. On modern systems the crypt() function encodes the algorithm, rounds and salt as a

Re: OpenSMTPD password encryption scheme.

2018-09-18 Thread Reio Remma
On 18.09.2018 19:33, Gilles Chehade wrote: On Tue, Sep 18, 2018 at 10:06:49AM +0300, Reio Remma wrote: Hello! I'm curious as to what determines the password scheme used by OpenSMTPD on a Linux system (CentOS 7 in my case). that's an easy one: OpenSMTPD uses the crypt() function provided by

Re: OpenSMTPD password encryption scheme.

2018-09-18 Thread Gilles Chehade
On Tue, Sep 18, 2018 at 06:33:33PM +0200, Gilles Chehade wrote: > > [...] > > $2b$09$fEv/zNZ/5hELpDH3Vq93AuygRLnySIcNXH78rq9WxPPbZJxmcdk5m > | | || > | | ||__ encrypted password > | | |__ begining of salt > | |__ beginning of rounds

Re: OpenSMTPD password encryption scheme.

2018-09-18 Thread Gilles Chehade
On Tue, Sep 18, 2018 at 10:06:49AM +0300, Reio Remma wrote: > Hello! > > I'm curious as to what determines the password scheme used by OpenSMTPD on a > Linux system (CentOS 7 in my case). When setting up the system I ended up > with using SHA512, because it seems to be what works both in

OpenSMTPD password encryption scheme.

2018-09-18 Thread Reio Remma
Hello! I'm curious as to what determines the password scheme used by OpenSMTPD on a Linux system (CentOS 7 in my case). When setting up the system I ended up with using SHA512, because it seems to be what works both in OpenSMTPD and Dovecot, but would really like to use Blowfish instead.