037f2c3f48
The difference between the AIX MD5 password algorithm and the standard MD5 password algorithm is that in AIX there is no magic string while in the standard MD5 password algorithm the magic string is "$1$" Documentation of '-aixmd5' option of 'openssl passwd' command is added. 1 test is added in test/recipes/20-test-passwd.t Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2251)
112 lines
2.4 KiB
Text
112 lines
2.4 KiB
Text
=pod
|
|
|
|
=head1 NAME
|
|
|
|
passwd - compute password hashes
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
B<openssl passwd>
|
|
[B<-help>]
|
|
[B<-crypt>]
|
|
[B<-1>]
|
|
[B<-apr1>]
|
|
[B<-aixmd5>]
|
|
[B<-5>]
|
|
[B<-6>]
|
|
[B<-salt> I<string>]
|
|
[B<-in> I<file>]
|
|
[B<-stdin>]
|
|
[B<-noverify>]
|
|
[B<-quiet>]
|
|
[B<-table>]
|
|
{I<password>}
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
The B<passwd> command computes the hash of a password typed at
|
|
run-time or the hash of each password in a list. The password list is
|
|
taken from the named file for option B<-in file>, from stdin for
|
|
option B<-stdin>, or from the command line, or from the terminal otherwise.
|
|
The Unix standard algorithm B<crypt> and the MD5-based BSD password
|
|
algorithm B<1>, its Apache variant B<apr1>, and its AIX variant are available.
|
|
|
|
=head1 OPTIONS
|
|
|
|
=over 4
|
|
|
|
=item B<-help>
|
|
|
|
Print out a usage message.
|
|
|
|
=item B<-crypt>
|
|
|
|
Use the B<crypt> algorithm (default).
|
|
|
|
=item B<-1>
|
|
|
|
Use the MD5 based BSD password algorithm B<1>.
|
|
|
|
=item B<-apr1>
|
|
|
|
Use the B<apr1> algorithm (Apache variant of the BSD algorithm).
|
|
|
|
=item B<-aixmd5>
|
|
|
|
Use the B<AIX MD5> algorithm (AIX variant of the BSD algorithm).
|
|
|
|
=item B<-5>
|
|
|
|
=item B<-6>
|
|
|
|
Use the B<SHA256> / B<SHA512> based algorithms defined by Ulrich Drepper.
|
|
See L<https://www.akkadia.org/drepper/SHA-crypt.txt>.
|
|
|
|
=item B<-salt> I<string>
|
|
|
|
Use the specified salt.
|
|
When reading a password from the terminal, this implies B<-noverify>.
|
|
|
|
=item B<-in> I<file>
|
|
|
|
Read passwords from I<file>.
|
|
|
|
=item B<-stdin>
|
|
|
|
Read passwords from B<stdin>.
|
|
|
|
=item B<-noverify>
|
|
|
|
Don't verify when reading a password from the terminal.
|
|
|
|
=item B<-quiet>
|
|
|
|
Don't output warnings when passwords given at the command line are truncated.
|
|
|
|
=item B<-table>
|
|
|
|
In the output list, prepend the cleartext password and a TAB character
|
|
to each password hash.
|
|
|
|
=back
|
|
|
|
=head1 EXAMPLES
|
|
|
|
B<openssl passwd -crypt -salt xx password> prints B<xxj31ZMTZzkVA>.
|
|
|
|
B<openssl passwd -1 -salt xxxxxxxx password> prints B<$1$xxxxxxxx$UYCIxa628.9qXjpQCjM4a.>.
|
|
|
|
B<openssl passwd -apr1 -salt xxxxxxxx password> prints B<$apr1$xxxxxxxx$dxHfLAsjHkDRmG83UXe8K0>.
|
|
|
|
B<openssl passwd -aixmd5 -salt xxxxxxxx password> prints B<xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/>.
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
Copyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
|
|
Licensed under the OpenSSL license (the "License"). You may not use
|
|
this file except in compliance with the License. You can obtain a copy
|
|
in the file LICENSE in the source distribution or at
|
|
L<https://www.openssl.org/source/license.html>.
|
|
|
|
=cut
|