summaryrefslogtreecommitdiff
path: root/docs/man
diff options
context:
space:
mode:
authorRainer Jung <rjung@apache.org>2019-01-01 20:52:56 +0000
committerRainer Jung <rjung@apache.org>2019-01-01 20:52:56 +0000
commit17a38a1eaee486e40369a14218167d8a9f26dd2e (patch)
tree678e428b3a2b4d06f799d5c7c843235745014464 /docs/man
parent7a1524fb1663cadfb0923afa2f2a6281a0b705f2 (diff)
downloadhttpd-17a38a1eaee486e40369a14218167d8a9f26dd2e.tar.gz
Docs rebuild after copyright year update.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1850117 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'docs/man')
-rw-r--r--docs/man/htpasswd.17
1 files changed, 5 insertions, 2 deletions
diff --git a/docs/man/htpasswd.1 b/docs/man/htpasswd.1
index 8ada546f6f..99affb85df 100644
--- a/docs/man/htpasswd.1
+++ b/docs/man/htpasswd.1
@@ -19,7 +19,7 @@
.el .ne 3
.IP "\\$1" \\$2
..
-.TH "HTPASSWD" 1 "2018-09-27" "Apache HTTP Server" "htpasswd"
+.TH "HTPASSWD" 1 "2019-01-01" "Apache HTTP Server" "htpasswd"
.SH NAME
htpasswd \- Manage user files for basic authentication
@@ -77,7 +77,7 @@ Use MD5 encryption for passwords\&. This is the default (since version 2\&.2\&.1
Use bcrypt encryption for passwords\&. This is currently considered to be very secure\&.
.TP
\fB-C\fR
-This flag is only allowed in combination with \fB-B\fR (bcrypt encryption)\&. It sets the computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 31)\&.
+This flag is only allowed in combination with \fB-B\fR (bcrypt encryption)\&. It sets the computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 17)\&.
.TP
\fB-d\fR
Use \fBcrypt()\fR encryption for passwords\&. This is not supported by the httpd server on Windows and Netware\&. This algorithm limits the password length to 8 characters\&. This algorithm is \fBinsecure\fR by today's standards\&. It used to be the default algorithm until version 2\&.2\&.17\&.
@@ -168,3 +168,6 @@ The MD5 algorithm used by \fBhtpasswd\fR is specific to the Apache software; pas
.PP
Usernames are limited to \fB255\fR bytes and may not include the character \fB:\fR\&.
+.PP
+The cost of computing a bcrypt password hash value increases with the number of rounds specified by the \fB-C\fR option\&. The \fBapr-util\fR library enforces a maximum number of rounds of 17 in version \fB1\&.6\&.0\fR and later\&.
+