Re: DES in libc
On 2015/11/25 08:24, Jan Stary wrote: > A rewording like that is below. Omitting the (3), as other names do > in guide.html, unless they are links to man.cgi. But apart from that, > should it say something like "we have a crypt() in libc, but don't use it"? No problem using it - it's just that the function that is in a separate library on some OS, but in libc on OpenBSD. Though it probably is worth calling out that it's not DES. > --- guide.html.orig 2015-11-24 19:46:48.0 +0100 > +++ guide.html2015-11-25 08:19:34.0 +0100 > @@ -1149,7 +1149,7 @@ And then the update. > instead of blindly installing files. > OpenBSD does NOT compress man pages. > OpenBSD does NOT require -lcrypt. > - DES encryption is part of the standard libc. > + A crypt function is implemented in the standard > libc. I'm going to commit it like this which I think covers everything; + OpenBSD does NOT require -lcrypt, -ldl, or -lrt. + The functions provided by these libraries are part of libc. + The crypt() function does not support DES, only bcrypt. - we can make further tweaks if wanted.
Re: DES in libc
On 2015/11/24 23:28, Jan Stary wrote: > The ports guide says > > OpenBSD does NOT require -lcrypt. > DES encryption is part of the standard libc. > > > Is DES really what we provide in crypt(), > as opposed to Blowfish? > > Jan > > Good catch, maybe just say "the crypt(3) function"?
Re: DES in libc
On Nov 24 22:35:09, st...@openbsd.org wrote: > On 2015/11/24 23:28, Jan Stary wrote: > > The ports guide says > > > > OpenBSD does NOT require -lcrypt. > > DES encryption is part of the standard libc. > > > > > > Is DES really what we provide in crypt(), > > as opposed to Blowfish? > > > > Jan > > Good catch, maybe just say "the crypt(3) function"? A rewording like that is below. Omitting the (3), as other names do in guide.html, unless they are links to man.cgi. But apart from that, should it say something like "we have a crypt() in libc, but don't use it"? Jan --- guide.html.orig 2015-11-24 19:46:48.0 +0100 +++ guide.html 2015-11-25 08:19:34.0 +0100 @@ -1149,7 +1149,7 @@ And then the update. instead of blindly installing files. OpenBSD does NOT compress man pages. OpenBSD does NOT require -lcrypt. - DES encryption is part of the standard libc. + A crypt function is implemented in the standard libc. OpenBSD has a separate namespace for users and groups created by ports. See /usr/ports/infrastructure/db/user.list for details. OpenBSD is strongly security-oriented. You should read and understand
