Project

General

Profile

Actions
Copy link

Todo #4120

closed
RB RB

Improve passwd security

Todo #4120: Improve passwd security

Added by Renato Botelho over 11 years ago. Updated over 10 years ago.

Status:
Resolved
Priority:
High
Assignee:
Renato Botelho
Category:
-
Target version:
2.3
Start date:
12/17/2014
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Release Notes:

Description

A couple of things to be done to improve pfSense passwd:

- Change hash from MD5 to SHA512 or blowfish
- Start to create a salt to crypt() calls

JT Updated by Jim Thompson over 11 years ago Actions
Copy link
 #1

  • Priority changed from Normal to High

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
 #2

  • Target version changed from 2.2.1 to 2.2.2

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
 #3

  • Target version changed from 2.2.2 to 2.2.3

CB Updated by Chris Buechler over 11 years ago Actions
Copy link
 #4

  • Target version changed from 2.2.3 to 2.3

RB Updated by Renato Botelho over 10 years ago Actions
Copy link
 #5

  • Status changed from New to Feedback
  • % Done changed from 0 to 100

Pull request #2450 has been merged

JT Updated by Jim Thompson over 10 years ago Actions
Copy link
 #6

bump

RB Updated by Renato Botelho over 10 years ago Actions
Copy link
 #7

It's working fine AFAIK. I didn't see any problems reported.

Left it in feedback so more people can validate

JP Updated by Jim Pingle over 10 years ago Actions
Copy link
 #8

  • Status changed from Feedback to Resolved

One place was missed (swapping the password for bcrypt-hash in /conf.default/config.xml), I pushed a correction for that. It's working well otherwise. Existing users are OK, when their passwords are changed their hash is converted to bcrypt in the config and in passwd, old hashes are removed, and they can still login to the GUI and over SSH. Looking through the repo I can't find any other trace of the old hash so I think we're set.

Actions
Copy link

Also available in: Atom