Branch: refs/heads/master
Home:
https://github.com/tribe29/checkmk
Commit: 685d1b7f5dcb7f19bdd7a4809ae6bd23d45a55d0
https://github.com/tribe29/checkmk/commit/685d1b7f5dcb7f19bdd7a4809ae6bd23d…
Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com>
Date: 2022-01-10 (Mon, 10 Jan 2022)
Changed paths:
A .werks/13196
M cmk/gui/plugins/userdb/htpasswd.py
M cmk/gui/plugins/userdb/utils.py
M cmk/gui/plugins/wato/ac_tests.py
M omd/packages/apache-omd/apache-omd.make
M tests/testlib/users.py
M tests/testlib/utils.py
M tests/unit/cmk/gui/conftest.py
M tests/unit/cmk/gui/plugins/userdb/test_htpasswd.py
M tests/unit/cmk/gui/test_userdb.py
M tests/unit/cmk/gui/test_userdb_htpasswd_connector.py
Log Message:
-----------
13196 SEC More secure password hashing
Passwords of local users were stored with SHA256-Crypt and 535000 rounds. Best
practice is bcrypt. Checkmk supports basic-auth and used to support Apache2.2.
Since bcrypt support was only added to Apache 2.4, SHA256-Crypt was used.
Apache 2.2 is no longer maintained and all supported operating systems come
with Apache 2.4. Therefore bcrypt is now used. The existing passwords will not
be modified or invalidated. They can still be read by Checkmk. Newly set
passwords via Web UI are now hashed with bcrypt.
CMK-9201
Change-Id: Ieaa1b72bee618a9d0879f31ab682af0e3e8ba0e7