From owner-freebsd-questions Wed Mar 21 12:46:36 2001 Delivered-To: freebsd-questions@freebsd.org Received: from obsecurity.dyndns.org (adsl-63-207-60-63.dsl.lsan03.pacbell.net [63.207.60.63]) by hub.freebsd.org (Postfix) with ESMTP id 957F637B718 for ; Wed, 21 Mar 2001 12:46:30 -0800 (PST) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id A933D66E9E; Wed, 21 Mar 2001 12:43:15 -0800 (PST) Date: Wed, 21 Mar 2001 12:43:15 -0800 From: Kris Kennaway To: Raoul Schroeder Cc: freebsd-questions Subject: Re: Default Cipher in OpenSSL Message-ID: <20010321124315.C5284@xor.obsecurity.org> References: <3AB8EDF9.6CE41BC6@gmx.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="WYTEVAkct0FjGQmd" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3AB8EDF9.6CE41BC6@gmx.net>; from memphis_ms@gmx.net on Wed, Mar 21, 2001 at 01:07:53PM -0500 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG --WYTEVAkct0FjGQmd Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Mar 21, 2001 at 01:07:53PM -0500, Raoul Schroeder wrote: > Hi everyone, >=20 > how can I change the default cipher in FreeBSD for everyone from DES to > RC4 or something along those lines? I think you may be confused here. Are you talking about the password algorithm used for passwords in /etc/master.passwd? OpenSSL is not involved in that (libcrypt is), and you have two choices: DES or MD5 (or Blowfish, compatible with OpenBSD, in -current). See login.conf(5) on recent versions of FreeBSD (the passwd_format login capability). Passwords are stored using a cryptographic hash, not a cipher. A cipher can be used to implement a hash (and vice versa), but they're two different things. Kris --WYTEVAkct0FjGQmd Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE6uRJjWry0BWjoQKURAuUUAKC3llUPrwIrrL8SmhtbD8kqWuP/XACghSmH 60mbVIjOGnWvutlV3OEMc+Q= =lnWo -----END PGP SIGNATURE----- --WYTEVAkct0FjGQmd-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message