cvs commit: src/release Makefile

[Tom Rhodes]

On Wed, 28 Sep 2005 20:08:11 +0100
Ceri Davies <ceri at submonkey.net> wrote:

> On Thu, Sep 29, 2005 at 05:02:16AM +1000, Peter Jeremy wrote:
> > On Wed, 2005-Sep-28 15:10:19 +0200, Pawel Jakub Dawidek wrote:
> > >On Wed, Sep 28, 2005 at 01:46:14PM +0100, Ceri Davies wrote:
> > >+> On Wed, Sep 28, 2005 at 12:39:00PM +0000, Ken Smith wrote:
> > >+> > kensmith    2005-09-28 12:39:00 UTC
> > >+> > 
> > >+> >   FreeBSD src repository
> > >+> > 
> > >+> >   Modified files:
> > >+> >     release              Makefile 
> > >+> >   Log:
> > >+> >   Add SHA256 checksums to the release build.
> > >+> 
> > >+> Good idea.  Along these lines, does anyone know what the barriers are
> > >+> in moving the default password hash from md5 to blowfish (not for
> > >+> RELENG_6, just in general), or has it just not been done yet?
> > 
> > You need to a line "crypt_default = blf" to /etc/auth.conf
> > That said, the blowfish magic string looks wrong - the MD5 and NT
> > hashes both have a training '$' but blowfish doesn't.  Is this
> > deliberate or a typo?
> 
> I know how to do it, and it does work (it has been the first thing I do
> on any system I build from 4.x up - you also need to update the default
> login class in login.conf).  I'm just wondering why it isn't default.

Issues interacting with NIS(+)?
Not listed in FIPS as an approved US government algorithm yet?
Everyone's too lazy?  :)

-- 
Tom Rhodes