[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Apache SHA1 Password bug (AMD64)



I have experienced a bug on AMD64 Apache/1.3.33 & Apache/1.3.34 (Debian) . SHA1 encrypted passwords do not seem to work. The issue is similar to this, but only seems to affect AMD64 on sarge and etch (I've tried it on several machines):
https://issues.apache.org/bugzilla/show_bug.cgi?id=17343

The following test case works on my i386 machine, but fails on AMD64. The SHA login is guest/guest, crypt is test/test.
Regards,
Kirk Ismay

.htaccess:
AuthName test
Deny from all
AuthType basic
AuthUserFile /var/www/test/.htpasswd
<limit GET POST>
require valid-user
satisfy any
</limit>
## end .htaccess

.htpasswd:
guest:{SHA}NWdeaPS1r3uZXZIFrQ/EOELxZFA=
test:d/kXMZ8tY7geY
## end .htpass



Reply to: