| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | =pod | 
					
						
							| 
									
										
										
										
											2019-10-31 11:35:08 +08:00
										 |  |  | {- OpenSSL::safe::output_do_not_edit_headers(); -} | 
					
						
							| 
									
										
										
										
											2019-10-13 05:45:56 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | =head1 NAME | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2019-08-22 07:04:41 +08:00
										 |  |  | openssl-passwd - compute password hashes | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  | =head1 SYNOPSIS | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | B<openssl passwd> | 
					
						
							| 
									
										
										
										
											2016-02-06 00:58:45 +08:00
										 |  |  | [B<-help>] | 
					
						
							| 
									
										
										
										
											2000-07-31 20:27:44 +08:00
										 |  |  | [B<-1>] | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | [B<-apr1>] | 
					
						
							| 
									
										
										
										
											2017-01-20 13:37:43 +08:00
										 |  |  | [B<-aixmd5>] | 
					
						
							| 
									
										
										
										
											2016-09-14 10:07:04 +08:00
										 |  |  | [B<-5>] | 
					
						
							|  |  |  | [B<-6>] | 
					
						
							| 
									
										
										
										
											2000-02-18 19:51:58 +08:00
										 |  |  | [B<-salt> I<string>] | 
					
						
							|  |  |  | [B<-in> I<file>] | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | [B<-stdin>] | 
					
						
							| 
									
										
										
										
											2000-11-17 17:03:02 +08:00
										 |  |  | [B<-noverify>] | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | [B<-quiet>] | 
					
						
							|  |  |  | [B<-table>] | 
					
						
							| 
									
										
										
											
												Document most missing options
Add cmd-nits make target.
Listing options should stop when it hits the "parameters" separator.
Add missing .pod.in files to doc/man1/build.info
Tweak find-doc-nits to try openssl-XXX before XXX for POD files and
change an error messavge to be more useful.
Fix the following pages: ca, cms, crl, dgst, enc,
engine, errstr, gendsa, genrsa, list, ocsp, passwd, pkcs7, pkcs12, rand,
rehash, req, rsautil, s_server, speed, s_time,
sess_id, smime, srp, ts, x509.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/10873)
											
										 
											2020-01-17 02:40:52 +08:00
										 |  |  | [B<-reverse>] | 
					
						
							| 
									
										
										
										
											2019-10-13 05:45:56 +08:00
										 |  |  | {- $OpenSSL::safe::opt_r_synopsis -} | 
					
						
							| 
									
										
										
										
											2020-02-25 12:29:30 +08:00
										 |  |  | {- $OpenSSL::safe::opt_provider_synopsis -} | 
					
						
							| 
									
										
										
										
											2019-09-20 09:33:17 +08:00
										 |  |  | [I<password>] | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  | =head1 DESCRIPTION | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
											
												Command docs: fix up command references
Almost all OpenSSL commands are in reality 'openssl cmd', so make sure
they are refered to like that and not just as the sub-command.
Self-references are avoided as much as is possible, and replaced with
"this command".  In some cases, we even avoid that with a slight
rewrite of the sentence or paragrah they were in.  However, in the few
cases where a self-reference is still admissible, they are done in
bold, i.e. openssl-speed.pod references itself like this:
    B<openssl speed>
References to other commands are done as manual links, i.e. CA.pl.pod
references 'openssl req' like this: L<openssl-req(1)>
Some commands are examples rather than references; we enclose those in
C<>.
While we are it, we abolish "utility", replacing it with "command", or
remove it entirely in some cases.
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/10065)
											
										 
											2019-10-02 01:43:36 +08:00
										 |  |  | This command computes the hash of a password typed at | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | run-time or the hash of each password in a list.  The password list is | 
					
						
							| 
									
										
										
										
											2019-09-26 03:20:11 +08:00
										 |  |  | taken from the named file for option B<-in>, from stdin for | 
					
						
							| 
									
										
										
										
											2000-11-17 17:03:02 +08:00
										 |  |  | option B<-stdin>, or from the command line, or from the terminal otherwise. | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  | =head1 OPTIONS | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | =over 4 | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-02-06 00:58:45 +08:00
										 |  |  | =item B<-help> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | Print out a usage message. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-07-31 20:27:44 +08:00
										 |  |  | =item B<-1> | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2020-11-04 20:34:52 +08:00
										 |  |  | Use the MD5 based BSD password algorithm B<1> (default). | 
					
						
							| 
									
										
										
										
											2000-07-31 20:27:44 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | =item B<-apr1> | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-07-31 20:27:44 +08:00
										 |  |  | Use the B<apr1> algorithm (Apache variant of the BSD algorithm). | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2017-01-20 13:37:43 +08:00
										 |  |  | =item B<-aixmd5> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | Use the B<AIX MD5> algorithm (AIX variant of the BSD algorithm). | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-09-14 10:07:04 +08:00
										 |  |  | =item B<-5> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | =item B<-6> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | Use the B<SHA256> / B<SHA512> based algorithms defined by Ulrich Drepper. | 
					
						
							|  |  |  | See L<https://www.akkadia.org/drepper/SHA-crypt.txt>. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-18 19:51:58 +08:00
										 |  |  | =item B<-salt> I<string> | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  | Use the specified salt. | 
					
						
							| 
									
										
										
										
											2000-11-17 17:03:02 +08:00
										 |  |  | When reading a password from the terminal, this implies B<-noverify>. | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-18 19:51:58 +08:00
										 |  |  | =item B<-in> I<file> | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-18 19:51:58 +08:00
										 |  |  | Read passwords from I<file>. | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  | =item B<-stdin> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | Read passwords from B<stdin>. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-11-17 17:03:02 +08:00
										 |  |  | =item B<-noverify> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | Don't verify when reading a password from the terminal. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | =item B<-quiet> | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-12 00:25:44 +08:00
										 |  |  | Don't output warnings when passwords given at the command line are truncated. | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							|  |  |  | =item B<-table> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | In the output list, prepend the cleartext password and a TAB character | 
					
						
							|  |  |  | to each password hash. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
											
												Document most missing options
Add cmd-nits make target.
Listing options should stop when it hits the "parameters" separator.
Add missing .pod.in files to doc/man1/build.info
Tweak find-doc-nits to try openssl-XXX before XXX for POD files and
change an error messavge to be more useful.
Fix the following pages: ca, cms, crl, dgst, enc,
engine, errstr, gendsa, genrsa, list, ocsp, passwd, pkcs7, pkcs12, rand,
rehash, req, rsautil, s_server, speed, s_time,
sess_id, smime, srp, ts, x509.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/openssl/pull/10873)
											
										 
											2020-01-17 02:40:52 +08:00
										 |  |  | =item B<-reverse> | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | When the B<-table> option is used, reverse the order of cleartext and hash. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2019-10-13 05:45:56 +08:00
										 |  |  | {- $OpenSSL::safe::opt_r_item -} | 
					
						
							| 
									
										
										
										
											2017-07-05 22:58:48 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2020-02-25 12:29:30 +08:00
										 |  |  | {- $OpenSSL::safe::opt_provider_item -} | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | =back | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2000-02-18 19:51:58 +08:00
										 |  |  | =head1 EXAMPLES | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-07-04 00:45:14 +08:00
										 |  |  |   % openssl passwd -1 -salt xxxxxxxx password | 
					
						
							|  |  |  |   $1$xxxxxxxx$UYCIxa628.9qXjpQCjM4a. | 
					
						
							| 
									
										
										
										
											2000-07-31 20:27:44 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-07-04 00:45:14 +08:00
										 |  |  |   % openssl passwd -apr1 -salt xxxxxxxx password | 
					
						
							|  |  |  |   $apr1$xxxxxxxx$dxHfLAsjHkDRmG83UXe8K0 | 
					
						
							| 
									
										
										
										
											2000-02-11 05:50:52 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-07-04 00:45:14 +08:00
										 |  |  |   % openssl passwd -aixmd5 -salt xxxxxxxx password | 
					
						
							|  |  |  |   xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/ | 
					
						
							| 
									
										
										
										
											2017-01-20 13:37:43 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2020-11-04 20:34:52 +08:00
										 |  |  | =head1 HISTORY | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | The B<-crypt> option was removed in OpenSSL 3.0. | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2016-05-18 23:44:05 +08:00
										 |  |  | =head1 COPYRIGHT | 
					
						
							|  |  |  | 
 | 
					
						
							| 
									
										
										
										
											2021-05-20 21:22:33 +08:00
										 |  |  | Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved. | 
					
						
							| 
									
										
										
										
											2016-05-18 23:44:05 +08:00
										 |  |  | 
 | 
					
						
							| 
									
										
										
										
											2018-12-06 21:04:11 +08:00
										 |  |  | Licensed under the Apache License 2.0 (the "License").  You may not use | 
					
						
							| 
									
										
										
										
											2016-05-18 23:44:05 +08:00
										 |  |  | this file except in compliance with the License.  You can obtain a copy | 
					
						
							|  |  |  | in the file LICENSE in the source distribution or at | 
					
						
							|  |  |  | L<https://www.openssl.org/source/license.html>. | 
					
						
							|  |  |  | 
 | 
					
						
							|  |  |  | =cut |