I can create example project for this (please ping me if i will be too silent)
According to MD5 as password hash function: this is bad idea https://security.stackexchange.com/questions/52461/how-weak-is-md5-as-a-password-hashing-function On Sat, 18 Apr 2020 at 02:42, K. Kamhamea <[email protected]> wrote: > OMG. I'm not experienced with Java. We are doing python mostly and > Javascript and rarely some C++ but never Java. > > I tried to compile your MD5implementation file > > https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java > but it failed because of missing dependencies. It probably requires the > whole source of the project being downloaded and properly installed. > So for the moment I decided I wouldn't spend my time to test all this I'm > just going to copy your detailed instruction into the Manual. > > The reason why I was so interested in this topic is because of > compatibility problems. I haven't found yet a python encryption library > that is compatible. By contrast, MD5 is a standard that is widely used. > > Thank you again so much for your help > K. > > > > Am Fr., 17. Apr. 2020 um 16:15 Uhr schrieb Maxim Solodovnik < > [email protected]>: > >> >> >> On Fri, 17 Apr 2020 at 18:54, K. Kamhamea <[email protected]> >> wrote: >> >>> I was just about testing other encryption methods as described >>> https://openmeetings.apache.org/CustomCryptMechanism.html >>> >> >> I doubt anyone ever try this :) >> >> >>> >>> Here I run into the following undocumented problems >>> 1. Where to copy the MD5Implementation.java >>> <https://github.com/apache/openmeetings/blob/256e5cd11e5af8f422688dfc1d01ac66b370d7a0/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5Implementation.java> >>> file into my file system >>> >> >> This is basic JAVA question :) >> Java programs need to be compiled >> i.e. After you have created class (which MUST implement interface) you >> need to >> 1) compile this class >> 2) Pack into JAR file >> 3) Put jar to webapps/openmeetings/WEB-INF/lib >> >> >>> 2. How to set the CLASSPATH so that it can be found anywhere in my >>> filesystem >>> >> >> jars from webapps/openmeetings/WEB-INF/lib are being loaded automatically >> >> >>> 3. What is actually the text string to be added into the configuration >>> variable " crypt.class.name " >>> >> >> In JAVA classes are usually being created in packages (to resolve >> possible name clashes) >> so You need to write something like: >> >> package com.googlemail.kamhamea; >> >> public class MySecureCryptProvider implements ICrypt { >> ........your secure algorithm here .......... >> } >> >> In config value you should write: >> "com.googlemail.kamhamea.MySecureCryptProvider" >> >> >> >>> Alternatively I tried this class >>> >>> http://openmeetings.apache.org/openmeetings-util/apidocs/org/apache/openmeetings/util/crypt/MD5.html >>> >>> But changing the configuration variable to " >>> org.apache.openmeetings.util.crypt.MD5 " creates but an error. >>> >> >> >> https://github.com/apache/openmeetings/blob/5.0.0-M3/openmeetings-util/src/main/java/org/apache/openmeetings/util/crypt/MD5.java >> Can't be used due to it doesn't implements ICrypt >> >> >> >>> >>> Best K. >>> >> >> >> -- >> Best regards, >> Maxim >> > -- Best regards, Maxim
