R8 mod_auth re-organisation

Matthias Lang matthias@REDACTED
Thu Jun 20 16:58:52 CEST 2002


Hi,

I just noticed that basic authentication in the INETs http server
doesn't work if you compile erlang without openSSL. This worked in R7.

Looking at mod_auth.erl, it appears to have undergone a total
rewrite. It now stores md5 hashes of passwords instead of the
passwords themselves, even when using plain, cleartext password
files. This is probably a feature.

I can only think of two ways to avoid this

  1. build erlang with openSSL
  2. modify mod_auth

I did the latter. Is there a another way?

My hack is attached, in case it's of use to anyone else. 

Matthias

-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch
Type: application/octet-stream
Size: 1338 bytes
Desc: patch to remove crypto from mod_auth
URL: <http://erlang.org/pipermail/erlang-questions/attachments/20020620/10168c0c/attachment.obj>


More information about the erlang-questions mailing list