Hi Keith, I have not compiled sqlite3.c with any option such as -DTCLSH=1 or -DSQLITE_TCLMD5 or -DSQLITE_TEST. I am just running configure and make to build sqlite3 ( Not changing anything in the Makefile that comes default with tarball). >From the first few lines from tclsqlite.c files, i guess MD5 is disable by-default. And it can be enable with options such as -DTCLSH=1 etc. (please correct me if i am wrong )?
Thanks Sameer On Mon, Feb 29, 2016 at 11:24 AM, Keith Medcalf <kmedcalf at dessus.com> wrote: > > Is TCL being used (you have to specifically include the TCL interface ONLY > if you are generating a DLL to be loaded into TCL)? > > Did you enable the MD5 commands? Why? > > If you do not want them being added to your TCL interpreter, then I would > suggest perhaps not enabling the option which causes them to be included > (as documented in the first few comment lines of the interface code, > tclsqlite.c) > > I thought Firefox was written in C, so why does it care about the TCL > interface, and why is it being included? Does Firefox have a TCL > interpreter hidden inside it? > > > -----Original Message----- > > From: sqlite-users-bounces at mailinglists.sqlite.org [mailto:sqlite-users- > > bounces at mailinglists.sqlite.org] On Behalf Of veer verma > > Sent: Sunday, 28 February, 2016 22:40 > > To: sqlite-users at mailinglists.sqlite.org > > Subject: [sqlite] Fwd: Sqlite is secure with MD5? > > > > Hi, > > > > Can i get some help on this please? > > > > Thanks > > Sameer > > > > Hello, > > > > I am using sqlite3-3.11.0, i See sqlite is using MD5 hash algorithm to > > generate MD5 checksums for TCL interface. Since MD5 is broken for > > purposes > > of security, How can i replace MD5 with any other hash algorithm (sha-2) > > to > > keep it secure from malicious attacker? > > Or Is there a way to compile sqlite without enabling TCl iinterface? if > > yes, will disabling TCL interface would cause firefox 31 or any other > > dependencies to break ? > > > > Thanks > > Sameer > > _______________________________________________ > > sqlite-users mailing list > > sqlite-users at mailinglists.sqlite.org > > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users > > > > _______________________________________________ > sqlite-users mailing list > sqlite-users at mailinglists.sqlite.org > http://mailinglists.sqlite.org/cgi-bin/mailman/listinfo/sqlite-users >
