Php – How to replicate a sha256 hash with salt using OpenSSL command line

encryptionhashopensslPHP

Using PHP's crypt function as follows, I can do a sha256 hash with salt and multiple rounds.

php -r "echo crypt('foo','\$5\$rounds=5000\$saltsaltsaltsalt');"

produces:

$5$rounds=5000$saltsaltsaltsalt$5RbfsOruKYb8v7hGn29A.I91maopNeJ2nIFH.SIEnSC

How can I perform this exact process (and/or validate a hash) using the OpenSSL command line program?

Best Answer

This password hashing algorithm is rather complex — see the complete description: http://www.akkadia.org/drepper/SHA-crypt.txt.

Unfortunately, the openssl passwd command does not currently support it — there is support only for the old DES-based crypt(), MD5-based crypt() and the Apache apr1 variant of MD5 salted hashes. There is a Debian bug report requesting SHA-256/512 password hash support, but currently nothing has been done.

Related Solutions

Php – Why won’t an alarm handler fire in a process run from a php process

Mod_php probably blocks this (using sigprocmask() I presume, masks are maintained through fork() and execve()) in order to prevent signals from mangling Apache (since mod_php runs PHP in apache's process).

If it's due to sigprocmask(), then I think you should be able to use perl's POSIX module to undo it in the exec()'d script, but I'm not exactly sure how it works. The Perl Cookbook has an example of blocking then unblocking SIGINT. I think it should be something like

use POSIX qw(:signal_h);
$sigset=POSIX::SigSet->new(SIGALRM);
sigprocmask(SIG_UNBLOCK,$sigset);

If that doesn't work, then maybe try installing php5-cgi, setting it up as a Handler in Apache for a different extension (say, .phpc) then renaming the script to ping.phpc and updating the links. Since CGI executes in its own process, the CGI version of PHP may not lock down the signals.

Php – apache , php , sendmail not working

This thread (look at the bottom) suggests that it may be a problem with SELinux permissions. Do you have SELinux enabled?

Best Answer

Related Solutions

Php – Why won’t an alarm handler fire in a process run from a php process

Php – apache , php , sendmail not working

Related Topic