Dear Wiki user, You have subscribed to a wiki page or wiki category on "Httpd Wiki" for change notification.
The following page has been changed by noodl: http://wiki.apache.org/httpd/EncryptedPasswords The comment on the change is: Minor grammatical changes ------------------------------------------------------------------------------ ## page was renamed from Encrypted Password = Basic Authentication = - There are four formats that Apache recognizes for basic-authentication passwords. Note that not formats work on every platform: + There are four formats that Apache recognizes for basic-authentication passwords. Note that not all formats work on every platform: 1. '''PLAIN TEXT''' ''(i.e. unencrypted)'' passwords: Windows, BEOS, & Netware only. - 2. '''CRYPT''' passwords: Unix only. Calls the Unix crypt(3) function with a randomly-generated 32-bit salt and the password + 2. '''CRYPT''' passwords: Unix only. Calls the Unix crypt(3) function with a randomly-generated 32-bit salt and the password. - 3. '''SHA1''' passwords: {{{"{SHA}"}}} + Base64-encoded SHA-1 digest of the password + 3. '''SHA1''' passwords: {{{"{SHA}"}}} + Base64-encoded SHA-1 digest of the password. 4. '''MD5''' passwords: {{{"$apr1$"}}} + the result of an Apache-specific algorithm using an iterated (1,000 times) MD5 digest of various combinations of a randomly-generated 32-bit salt and the password. See the APR source file [http://svn.apache.org/viewvc/apr/apr-util/trunk/crypto/apr_md5.c?view=markup apr_md5.c] for the details of the algorithm. ==== The htpasswd program can be used to generate values ==== @@ -68, +68 @@ * '''Java''' {{{"{SHA}" + new sun.misc.BASE64Encoder().encode(java.security.MessageDigest.getInstance("SHA1").digest(password.getBytes())) }}} - * '''ColdFusion''' + * '''!ColdFusion''' {{{"{SHA}" & ToBase64(BinaryDecode(Hash(password, "SHA1"), "Hex")) }}} * '''Ruby''' @@ -102, +102 @@ s = "0" + s; // String s is the digest hash }}} - * '''ColdFusion''' + * '''!ColdFusion''' {{{LCase(Hash( (user & ":" & realm & ":" & password) , "MD5")) }}} * '''Ruby'''
