| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | - Added auth method 'sslclientcertfp' which provides an alternative••• method to authenticate users with SSL client certificates based
on SHA256 fingerprints. This can be used instead of the already
existing 'sslclientcert' so you don't have to use an external file.
One way to get the SHA256 fingerprint would be:
openssl x509 -in name-of-pem-file.pem -sha256 -noout -fingerprint
Suggested and patch supplied by Jobe (#4019).
- Added documentation on the new sslclientcertfp
- Moved documentation on authentication types to one place and refer
to it from each section (oper::password, vhost::password,
link::password-receive, etc).
|  Bram Matthys | 2012-10-15 | 1 | -0/+2 |
| * | - Added salted passwords. Salts are useful because it "protects" against stor...••• attacks (eg: rainbow) and prevents cracking of several passwords at once.
This change means /MKPASSWD will now just generate a different string than before.
Do note however, that the old syntax/encrypted passwords will still work and _will continue
to work_ in the future, for at least the whole 3.2* series.
If you are concerned with security and have some time, then converting your passwords
is probably a good idea... Just in case your configuration file gets stolen one day ;).
- MD5 password encryption is now always available on *NIX, even if SSL is disabled.
| Bram Matthys | 2004-09-19 | 1 | -5/+2 |
| * | fixed crypt on win32 |  stskeeps | 2003-01-18 | 1 | -0/+5 |
| * | - Changed auth method sslpubkey into sslclientcert, which means it will check...••• user using X509_cmp. Also needing is some policy/conf setting to adjust if to reject invalid client certificates or whatever..
| stskeeps | 2002-09-27 | 1 | -2/+2 |
| * | Added MD5 and SHA1 encryption to the win32 version | codemastr | 2002-07-01 | 1 | -1/+8 |
| * | Added support for RIPEMD-160 encryption of passwords | codemastr | 2002-07-01 | 1 | -0/+2 |
| * | +- Actually enabled MD5, SHA1 methods when SSL was defined. (fix for drunk•••+ coding)
| stskeeps | 2001-12-25 | 1 | -4/+4 |
| * | +- Made "Module already loaded" a non fatal error (funny msg on rehash)•••+- Fixed typical codemastr "Let's delete this from a list we haven't even
+ added it to yet *giggles and twirls around*" bug, do to with config_set_unknown
+- Fixed events bug, added recoded scan module, got a lot of stuff to fix so
+ far. Problems, unloading, (delay), tkl doesn't always sweep it all,
| stskeeps | 2001-12-13 | 1 | -4/+4 |
| * | +- Added ssl-pubkey auth method (parameter = pem file for public key) | stskeeps | 2001-12-02 | 1 | -5/+6 |
| * | moo | stskeeps | 2001-12-01 | 1 | -0/+4 |
| * | Argh, no newline notices getting annoying now | griever | 2001-11-29 | 1 | -1/+5 |
| * | +- Added new auth.c API and a lot of different crap .. will document later | stskeeps | 2001-11-15 | 1 | -0/+38 |
Bram Matthys
stskeeps