Hi,
The SSHA of the raop1 is placed in 
/etc/openxpki/config.d/realm.tpl/auth/handler.yaml as 
raop1: "{ssha}zsmRmCaV2+Mg2t49v5hk3znKOL1VbnRz"

the openxpkiadm hashpwd of OpenXPKI gives the following output 

Your hashed password 
is:$argon2id$v=19$m=32768,t=3,p=1$OTF5RTA5ZEt5cHM5Qmord1hRSktoQT09$fP5TeBuDgqimXDoCXH+q2g
How the argon2 will be used in handler.yaml file for raop argon2 password??
Furthermore what is the command switch to use SHA512, i am trying the following 
one but it is not working
openxpkiadm hashpwd -s sha512Unsupported scheme - supported values: 
sha|ssha|md5|smd5|crypt|argon2
RegardsScott Thomas


    On Thursday, 8 July 2021, 02:18:17 am GMT+5, Martin Bartosch via 
OpenXPKI-users <[email protected]> wrote:  
 
 > OpenXPKI uses SSHA salted Sha 1 for raop password authentication via 
 > openxpkiadm hashpwd. How can we configure to use a higher version of SHA 
 > such as SHA256 OR SHA512?

The OpenXPKI password authentication handler supports salted md5, sha1, sha224, 
sha256, sha384 and sha512, crypt and argon2.
A hashed argon2 password can be generated e. g. via openxpkiadm hashpwd -s 
argon2

Most installations I know of delegate user authentication and authorization to 
a suitable authentication backend, e. g. an LDAP directory.

Cheers

Martin



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
  
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to