From 8f2099baf8f540fdc980d59bd5dcac12808b68b7 Mon Sep 17 00:00:00 2001 From: Peter Bieringer Date: Thu, 13 Mar 2025 06:43:27 +0100 Subject: [PATCH] add note about unpatched htpasswd related to https://github.com/Kozea/Radicale/issues/1721 --- DOCUMENTATION.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/DOCUMENTATION.md b/DOCUMENTATION.md index 32514e79..8b6cbcbf 100644 --- a/DOCUMENTATION.md +++ b/DOCUMENTATION.md @@ -131,6 +131,10 @@ It can be stored in the same directory as the configuration file. The `users` file can be created and managed with [htpasswd](https://httpd.apache.org/docs/current/programs/htpasswd.html): +Note: some OS contain unpatched `htpasswd` (< 2.4.59) without supporting SHA-256 or SHA-512 +(e.g. Ubuntu LTS 22), in this case use '-B' for "bcrypt" hash method or stay with +insecure MD5 (default) or SHA-1 ('-s'). + ```bash # Create a new htpasswd file with the user "user1" using SHA-512 as hash method $ htpasswd -5 -c /path/to/users user1