Skip to main content
Information Security

Return to Answer

Hedge. It *does* use crypt(), but I'm uncertain it doesn't check which format is used first.
Source Link
Matt Nordhoff
Matt Nordhoff
  • 216
  • 2
  • 3

I haven't tested this myself, but reading Nginx's source code, it directly usesseems to use libc's crypt() function directly. Depending on your OS, you may have a sane crypt() implementation available, either bcrypt or glibc's SHA-256/SHA-512 scheme. It's worth a shot to see if you can use it with Nginx.

I haven't tested this myself, but reading Nginx's source code, it directly uses libc's crypt() function. Depending on your OS, you may have a sane crypt() implementation available, either bcrypt or glibc's SHA-256/SHA-512 scheme. It's worth a shot to see if you can use it with Nginx.

I haven't tested this myself, but reading Nginx's source code, it seems to use libc's crypt() function directly. Depending on your OS, you may have a sane crypt() implementation available, either bcrypt or glibc's SHA-256/SHA-512 scheme. It's worth a shot to see if you can use it with Nginx.

Source Link
Matt Nordhoff
Matt Nordhoff
  • 216
  • 2
  • 3

I haven't tested this myself, but reading Nginx's source code, it directly uses libc's crypt() function. Depending on your OS, you may have a sane crypt() implementation available, either bcrypt or glibc's SHA-256/SHA-512 scheme. It's worth a shot to see if you can use it with Nginx.