httpd clear password

[Pascal Bellard]

Hello,

httpd does not support clear password when FEATURE_HTTPD_AUTH_MD5 is set.

The fix :
--- busybox/networking/httpd.c.org      Thu Jan 19 12:33:37 2012
+++ busybox/networking/httpd.c  Thu Jan 19 12:34:32 2012
@@ -1840,7 +1840,7 @@
                        /* this cfg entry is '*' or matches username from
peer */

                        /* encrypt pwd from peer and check match with
local one */
-                       {
+                       if (passwd[0] == '$' && passwd[1] == '1' &&
passwd[2] == '$') {
                                char *encrypted = pw_encrypt(
                                        /* pwd: */  colon_after_user + 1,
                                        /* salt: */ passwd,

Regards,

-pascal
-------------- next part --------------
A non-text attachment was scrubbed...
Name: httpd.u
Type: application/octet-stream
Size: 440 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/busybox/attachments/20120119/0e97c5b0/attachment.obj>