Tomcat is simply wrapping calls to java.security.MessageDigest.  It doesn't
provide an implementation of the MD5 algorithm;  it just uses the one
provided by the installed security-provider.  It should also ship with a 1.4
JDK.  Other than you JVM vendor, you could also look at cryptex if you want
an open-source implementation.

"Tim Penhey" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> I have a web application that manages the usernames and passwords for a
JDBCRealm.  The
> realm uses MD5 digest to encrypt the passwords for checking, and the
encrypted passwords
> are stored in the DB.
>
> The docs say to have TOMCAT_HOME/server/lib/catalina.jar in the classpath
in order to use
> the RealmBase.Digest static method, but I was wondering if there is
another source around
> that will do the same MD5 digesting of passwords so I don't need
catalina.jar in
> WEB-INF/lib.
>
> I don't really want to move around any of the tomcat jars, like from
server to common, as
> I want the web app to be able to deploy on another vanilla install of
tomcat.
>
> Any ideas?
>
> Thanks,
> Tim




---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to