summaryrefslogtreecommitdiff
path: root/support
diff options
context:
space:
mode:
authorJoe Orton <jorton@apache.org>2019-07-05 12:38:27 +0000
committerJoe Orton <jorton@apache.org>2019-07-05 12:38:27 +0000
commit594b57e89725faaeaf9a4c485637c2a26aa0395b (patch)
treeab16d7069eb4075b268750c6a68e1b5454837f2d /support
parent29a3e3e50af3f0ba3c486b5e28bd3801be166c33 (diff)
downloadhttpd-594b57e89725faaeaf9a4c485637c2a26aa0395b.tar.gz
* support/htpasswd.c (usage): Document SHA-256/512 support.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1862611 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'support')
-rw-r--r--support/htpasswd.c10
1 files changed, 7 insertions, 3 deletions
diff --git a/support/htpasswd.c b/support/htpasswd.c
index f399a9b423..7366dcb6e7 100644
--- a/support/htpasswd.c
+++ b/support/htpasswd.c
@@ -109,17 +109,21 @@ static void usage(void)
"for it." NL
" -i Read password from stdin without verification (for script usage)." NL
" -m Force MD5 encryption of the password (default)." NL
- " -B Force bcrypt encryption of the password (very secure)." NL
+ " -2 Force SHA-256 crypt() hash of the password (very secure)." NL
+ " -5 Force SHA-512 crypt() hash of the password (very secure)." NL
+ " -B Force bcrypt aencryption of the password (very secure)." NL
" -C Set the computing time used for the bcrypt algorithm" NL
" (higher is more secure but slower, default: %d, valid: 4 to 17)." NL
+ " -r Set the number of rounds used for the SHA-256, SHA-512 algorithms" NL
+ " (higher is more secure but slower, default: 5000)." NL
" -d Force CRYPT encryption of the password (8 chars max, insecure)." NL
- " -s Force SHA encryption of the password (insecure)." NL
+ " -s Force SHA-1 encryption of the password (insecure)." NL
" -p Do not encrypt the password (plaintext, insecure)." NL
" -D Delete the specified user." NL
" -v Verify password for the specified user." NL
"On other systems than Windows and NetWare the '-p' flag will "
"probably not work." NL
- "The SHA algorithm does not use a salt and is less secure than the "
+ "The SHA-1 algorithm does not use a salt and is less secure than the "
"MD5 algorithm." NL,
BCRYPT_DEFAULT_COST
);