]> git.ipfire.org Git - thirdparty/shadow.git/commit
login.defs: include HMAC_CRYPTO_ALGO key 333/head
authorIker Pedrosa <ipedrosa@redhat.com>
Thu, 6 May 2021 15:23:33 +0000 (17:23 +0200)
committerIker Pedrosa <ipedrosa@redhat.com>
Thu, 6 May 2021 15:31:53 +0000 (17:31 +0200)
commitb8cbc2c11369c1391832452e6ce0522c81bcf726
tree0c5f34b11187d9e41ba56e81199da4c0ab06269d
parente6416fd81bff205f9daac3da02cb3392d3d75e58
login.defs: include HMAC_CRYPTO_ALGO key

Include the new HMAC_CRYPTO_ALGO key that is needed by pam_timestamp to
select the algorithm that is going to be used to calculate the message
authentication code.

pam_timestamp is currently using an embedded algorithm to calculate the
HMAC message, but the idea is to improve this behaviour by relying on
openssl's implementation. On top of that, the ability to change the
algorithm with a simple configuration change allows to simplify the
process of removing unsecure algorithms.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1947294
etc/login.defs
lib/getdef.c
man/Makefile.am
man/login.defs.5.xml
man/login.defs.d/HMAC_CRYPTO_ALGO.xml [new file with mode: 0644]