Feature #20774
closedChange Hardcoded MD5 Password Encryption in User/Setup
0%
Description
Currently it is only possible to change your BE-Password via User->Setup to an md5 hash.
For saltedpasswords integration this must be flexible
Solution:
Introduce an Hook zu register your own eval-Func.
thanks to Steffen Kamper who provided the patch, saltedpasswords is using
(issue imported from #M11564)
Files
Updated by Rupert Germann about 15 years ago
I added a new patch which works with latest "saltedpasswords" from forge:
http://forge.typo3.org/repositories/browse/extension-t3sec_saltedpw/trunk
Attention: this patch also requires changes in "saltedpasswords": see patch 11564_ext_saltedpw.diff
Updated by Rupert Germann about 15 years ago
Question:
why do we have 2 salted passwords extensions?
is t3sec_saltedpw from TER supposed to work with 4.3, too ?
Updated by Steffen Ritter about 15 years ago
hi Rupert,
t3sec_saltedpw will get <4.3...
saltedpasswords in trunk is the sys-ext implementation which was nearly build from scratch.
Will apply your patch and commit it to saltedpasswords trunk!
Updated by Rupert Germann about 15 years ago
how to test:
- check out latest "saltedpasswords" from svn
- install it and configure it to be used for be_user passwords
- apply the patch 11564_ext_saltedpw.diff to "saltedpasswords"
- apply the patch 11564_saltedpwhook_v2.diff to TYPO3 trunk
- open the setup module and change your password
- log out
- log in with your new password
Updated by Steffen Ritter about 15 years ago
saltedpassword changes committed,
so you can skip patching saltedpasswords
Updated by Marcus Krause about 15 years ago
Thanks a lot, Steffen!
Again for clarification:- t3sec_saltedpw is a extension in TER to be used with TYPO3 < 4.3
(considered to be as proof of concept althought it is already widely deployed) - saltedpasswords will be a sysext for TYPO3 4.3
(backwards compatible with t3sec_saltedpw; provides further hashing methods)
Regarding Forge: sysext is in trunk, TER ext is in branch RB-TER
Updated by Rupert Germann about 15 years ago
thanks steffen.
did it work for you?
Updated by Rupert Germann about 15 years ago
committed attached v3 to trunk rev 5957