From owner-freebsd-questions  Tue Aug 12 18:58:17 1997
Return-Path: <owner-freebsd-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id SAA08966
          for questions-outgoing; Tue, 12 Aug 1997 18:58:17 -0700 (PDT)
Received: from gdi.uoregon.edu (cisco-ts7-line11.uoregon.edu [128.223.150.58])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id SAA08956
          for <questions@FreeBSD.ORG>; Tue, 12 Aug 1997 18:58:12 -0700 (PDT)
Received: from localhost (dwhite@localhost)
          by gdi.uoregon.edu (8.8.5/8.8.5) with SMTP id SAA00382;
          Tue, 12 Aug 1997 18:58:04 -0700 (PDT)
Date: Tue, 12 Aug 1997 18:58:03 -0700 (PDT)
From: Doug White <dwhite@gdi.uoregon.edu>
X-Sender: dwhite@localhost
Reply-To: Doug White <dwhite@resnet.uoregon.edu>
To: "Jonathan A. Zdziarski" <jonz@netrail.net>
cc: questions@FreeBSD.ORG
Subject: Re: Encryption Upgrade
In-Reply-To: <Pine.BSF.3.95q.970811164346.29048A-100000@netrail.net>
Message-ID: <Pine.BSF.3.96.970812185703.252O-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Mon, 11 Aug 1997, Jonathan A. Zdziarski wrote:

> Doing a search in /usr for crypt, I've found
> 
> /usr/lib/libcrypt.a
> /usr/lib/libcrypt.so.2.0
> /usr/lib/libscrypt.a
> /usr/lib/libscrypt.so.2.0
> /usr/lib/libcrypt_p.a
> /usr/lib/libscrypt_p.a
> /usr/local/bin/pgpencrypt
> /usr/share/man/man3/crypt.3.gz
> /usr/share/man/man3/encrypt.3.gz
> /usr/share/man/man3/skey_crypt.3.gz
> /usr/src/gnu/usr.bin/gzip/crypt.c
> /usr/src/gnu/usr.bin/gzip/crypt.h
> /usr/src/gnu/usr.bin/perl/perl/crypt.c
> 
> If I replace these files with copies of the ones from the server using the
> encryption method I want, and rebuild the kernel, will this work, or are
> there other files that need to be copied, or is it impossible to do it by
> just copying files and rebuilding?

Recopying them and rebuilding the affected binaries should work.  The
kernel has no knowledge of encryption though so you can skip that step.

I assume you want to migrate from MD5 to DES?

> on the server who's encryption I want to upgrade I see a lot of files in
> /usr/src/secure/lib as well, but I dont see these on the server who's
> encryption I want.

Doug White                              | University of Oregon  
Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
http://gladstone.uoregon.edu/~dwhite    | Computer Science Major
Spam routed to /dev/null by Procmail    | Death to Cyberpromo