Questions tagged [hash]
The hash tag has no usage guidance.
0
votes
1answer
61 views
haproxy tls hash algorithm
I'm using HAProxy 1.7.5 and openssl 1.1.0f (from Debian 9.5 stabel) to serve TLS connections.
Now there are clients offering SHA-384 and SHA-512 based signature algorithms in the client hello message. ...
0
votes
1answer
58 views
Set already hashed password for user against open ldap
Let me describe the infrastructure I am trying to configure. There is an opne ldap server on centOS (running slapd 2.4.40) as distributed authentication method for a couple of boxes.
Is there a way ...
0
votes
0answers
519 views
How to reset Ubiquiti UniFi Controller admin password?
I need to get into a Ubiquiti UniFi Controller system that was setup by one of my predecessors. The admin password has long since been lost and the company now uses a different Wi-Fi system at the ...
1
vote
1answer
27 views
shasum returns an incorrect result
Calculating SHA256 gives me an incorrect result when I'm using "shasum":
$ echo "abcd" | shasum -a 256
fc4b5fd6816f75a7c81fc8eaa9499d6a299bd803397166e8c4cf9280b801d62c -
# or
$ echo abcd | shasum -...
0
votes
1answer
76 views
multiple sha1 file hashes conversion
Issue Description:
I'm trying to comply with our Security Advisories. The advisories contain nearly 1000 MD5 & Sha 256 file hashes. I need to convert them into sha1 and update them in our endpoint ...
0
votes
0answers
354 views
nginx add cookie with generated hash
How can I generate random hash with expire time for cookie in nginx?
I tried nginx-sticky-module-ng but sticky can generate only numbers of nginx server.
0
votes
0answers
49 views
Dovecot: How can I set the default computational complexity for dovecot key derivation function (Argon2)?
I'm using Debian 9 in my system, and I'd like to use the Argon2 key derivation function for Dovecot. According to docs, there's a parameter -r that can determine the computational complexity. I can do ...
0
votes
3answers
471 views
Can you set the number of rounds that ansible's password_hash jinja2 filter uses?
In ansible, it's pretty convenient to use something like this:
- name: Make sure user password is set
user:
name: my_user
password: "{{ user_password|password_hash('sha512', 'SomeSalt') }}"...
0
votes
0answers
117 views
get SHA256 has of certificate chain of my certificate
I got my server certificate mycert.pem by command:
cho -n | openssl s_client -connect <my.server.hostname> | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > mycert.pem.
I would like ...
0
votes
1answer
361 views
Linux FTP server which can work with unsalted SHA256 hashes?
Problem
Some old WS_FTP server stopped booting at work after a Windows update. The corresponding admin is long gone. The only information I have is :
file structure
user names
unsalted SHA256 hash ...
0
votes
1answer
17 views
compare 2 directories with different files names and locations of the files
I'm currently having 2 (top level) directories with a lot of sub directories and files.
There are a lot of duplicate files between those directories but there is one problem with it, the names of the ...
0
votes
1answer
204 views
sendmail authentication with passwords in SHA512 hash
Is it possible for sendmail to authenticate users from LDAP with passwords stored as SHA512 hash ?
If yes, how?
Edit: OS is Arch Linux and i want to use only LDAP to authenticate users.
3
votes
3answers
335 views
How does “your new password must differ at least n characters from the previous” work when only hash codes are stored?
I am wondering how the password policy "your new password must differ at least n characters from your old password" works.
My understanding is that the OS never actually stores the old passwords ...
2
votes
3answers
5k views
Nginx: could not build map_hash, you should increase map_hash_bucket_size: 64
I need to use redirect map with quite a lot rules (2k+ lines, file size is ~200K)
I have the following settings in nginx:
map $uri $new_uri {
include /etc/nginx/conf.d/redirects.map;
}
...
0
votes
1answer
449 views
Does any varnish using directors.hash() and hash.backend() always choose the same backend?
I have 2 varnish, each of them having 2 backends (same varnish versions -v4.x- and configuration file).
Incoming client connections are randomly distributed to any available varnish.
I need clients ...
11
votes
3answers
1k views
Windows 2012 R2 - Search for Files using MD5 Hash?
My organization recently discovered malware that was sent to some users via email that managed to get past our email security in a sophisticated, targeted attack. The names of the files vary from user ...
14
votes
1answer
1k views
Why isn't MacTripleDes algorithm output in PowerShell stable?
I am checking the file hashes using several different algorithms in powershell. When I use MacTripleDes, I always get different hashes. All of the others, such as SHA256 or MD5 always give reliable ...
0
votes
2answers
808 views
Secure link depending only on directory name?
I am currently struggling to make nginx secure just folder name, dependlessly what the file name inside of it is. Let's say, I'm accessing a file in a folder /one/two/three, it would look like this:
...
0
votes
1answer
50 views
ansible hash summ of vaiables
Help please, the second day can not solve the problem.
I need to add checksum sha1 in file that is created from a template
Example:
{{ item.some_var1 | hash('sha1') }} - work fine
But when I'm trying ...
1
vote
1answer
749 views
CSP nginx nonce
I have some problems with adding CSP to my site. I configured Content-Security-Policy-Report-Only in my nginx configuration. And i get this.
adsbygoogle.js:37 [Report Only] Refused to apply inline ...
5
votes
7answers
2k views
How does one check huge files identity if hashing is CPU bound?
For small files hashing is just ok, but with huge ones you can easily find md5sum is CPU bound. Is there any hashing algorithm able to scale out on multiple cores? Any workarounds? Ideas? Anything? :)
0
votes
0answers
124 views
How can I replicate Microsoft .NET manifest hashes, ideally on Linux command line?
I have a .NET click-once application which, I found out the hard way (user could not install), checks the checksums of its configuration files against checksums in the .exe.manifest as calculated at ...
1
vote
1answer
53 views
How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?
To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
0
votes
1answer
93 views
What is the exact Juniper and Cisco router per-packet balancing hash algorithm?
Due to JunOS and Cisco documentation there is ability to configure hashing algorithm choosing one of the next-hop from the several multiple equal-cost paths. There is information about fields that ...
0
votes
1answer
431 views
Custom algorithm for password hashing with vsftpd
Traditionally, when the client logs in, it sends the credentials (username+pw) without any further processing. The server then checks if an entry exists in its user database that matches the supplied ...
2
votes
1answer
314 views
Cloud-Config - Hashed Password Being Set Incorrectly
I'm provisioning an Ubuntu 14.04 server with Digital Ocean and am using Cloud-Config in the user data field to do some initial setup. The issue I am having is creating a new user and setting a ...
0
votes
1answer
120 views
rsync syncs too much files
I have the following directory structure:
/tmp1
\_ file1.txt
\_ file2.txt
/tmp2
\_ file1.txt
\_ file2.txt
\_ file3.txt
/changes
With rsync's --compare-dest option, I want to sync all ...
1
vote
1answer
242 views
RKHunter report: “No hash value found”
I'm getting RKHunter warnings every day when my cron job runs the check.
I'm on FreeBSD 10.2
This is the warning I'm getting:
Warning: No hash value found for file '/usr/bin/perl' in the 'rkhunter....
1
vote
2answers
478 views
How can I distribute clients to servers evenly with hash_ip in Nginx as loadbalancer?
I know Nginx can use hash_ip to tie specific clients to a server.
My question is when Nginx is hashing with client IP, does it distribute clients to servers evenly regardless of whatever client IP is ...
3
votes
1answer
4k views
How to use SHA-256 hashed (and salted) passwords from OpenLDAP in pam_ldap?
I have hashed and salted passwords in OpenLDAP for login via PAM in Linux. The setup works when the hashes are of type SHA-1 (salted or unsalted) or plain text. In these cases everything works fine ...
5
votes
1answer
917 views
What does AAA mean in nginx example of split_clients?
On nginx docs there is an example of split_clients directive:
split_clients "${remote_addr}AAA" $variant {
0.5% .one;
2.0% .two;
...
0
votes
1answer
22 views
Logging or Auditing functionality for un/successful access to password hash files and other authentication files on Windows Server 2008 R2
I have been asked to find whether there is auditing enabled for one of our Windows Servers for accessing password hash files or other files used for authentication.
Does anyone know if there is a ...
0
votes
1answer
898 views
(Zimbra)OpenLDAP SSHA512
So, our employees use the Zimbra OpenLDAP, however, since this doesnt include PosixAccount we cant automatically link it to our Synology.
So my boss wanted me to create an OpenLDAP Database, and ...
1
vote
1answer
429 views
I switched my password hashing from md5 to ssha512, now exim4 won't accept smtp-logins
I have recently switched my password hashing from md5 to ssha512. This works fine with dovecot, so I can read incoming mail without problems.
It does not work as well for exim4.
Log output from ...
2
votes
2answers
5k views
How to set specify encryption hash when creating Linux user? [closed]
I want to create a few Linux user on my computer to test JohnTheRipper against different kind of password (including length, charset and encryption hash method). How can I easily specify which hashing ...
0
votes
1answer
964 views
FCIV recursive verification on a xml file
Copying files folder to files_copy folder, one wants to check the files were copied correctly. Fciv.exe permits to make an xml database of the original files and then compare it to the copied ...
2
votes
1answer
700 views
W2012 R2 AD certificate Services sha algorithm
So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 ...
1
vote
2answers
3k views
Thawte SSL123 SHA-2 Intermediate Certificate Chain, Broken?
I attempted to upgrade my one Web site, running nginx, from a SHA-1 SSL123 certificate to a SHA-2 one.
Thawte's Web page with intermediate CAs has "RSA SHA-2 (under SHA-1 Root)" and "RSA SHA-2 (...
0
votes
1answer
67 views
After Updating to SHA2, private and public doesn't match
I've upgraded to SHA2 certificate, but after upgrading the new certificate key doesn't match my old private key.
Public key has changed after updating and it doesn't match to previous private key.
...
3
votes
1answer
76 views
Should Chrome's SHA-1 match OpenSSL's?
If I compare the SHA-1 shown for the certificate for https://0000.jp in Chrome:
79 72 28 12 74 83 85 DE 3C B0 DE E7 A4 C3 14 BE B4 93 79 6E
with that presented by OpenSSL:
$ echo -n | openssl ...
-2
votes
1answer
343 views
Understanding linux /etc/shadow file structure (Linux) [closed]
Consider the following line taken from /etc/shadow file:
root:$1$NFEf74q.$bmukkxAq9dOMJINgEtP7u0:15258:0:::::
From this I understand that the hashing algorithm is md5 ($1) and starting from third $ ...
3
votes
4answers
925 views
How to generate Amazon Glacier SHA-256 Tree Hash for a file locally?
To verify my files have uploaded correctly, is there a tool to generate the Amazon Glacier Tree Hash SHA-256 for files locally?
2
votes
1answer
1k views
MySQL and SSL with -sha256
I'm trying to create some certificate to use with MySQL and everything works fine if I use the sha1 algorithm. If I add the -sha256 switch or -sha384 I can NOT connect to MySQL!. I get this error: ...
3
votes
1answer
4k views
SHA-2 signed SSL certificate crashes apache on startup on CentOS 5.X
In preparation of the warnings that are going to start showing up in browsers when visiting SSL sites with SHA1 signed certificates, I wanted to get all of the certs that I have upgraded.
Some of ...
5
votes
2answers
13k views
Generating an SHA256 SSL CSR on CentOS/RHEL using genkey
The officially recommended method of generating a web server SSL certificate CSR (according to RHEL6 and CentOS 6 documentation) is to use the genkey utility. When used according to the docs, this ...
2
votes
0answers
233 views
Deprecation of RSA-SHA-1 in DKIM keys?
I recently noticed that opendkim on my mail server is objecting to DKIM signatures from a client, saying their key is insecure. It may be that that's due to lack of secure DNS (confirmation?) but I ...
2
votes
4answers
24k views
ESXi 5.5 NIC teaming for Load balancing using Cisco Etherchannel
I am using Cisco 3750G stacked switch configured with etherchannel and connected to ESXi Server configured with NIC teaming; Load balancing as router based on IP Hash.
Cisco Switch configuration: ( ...
0
votes
1answer
465 views
KB968730 after Server 2003 SP2 already installed
Our company already has Server 2003 SP2 installed, and with it brought crypt32.dll version 5.131.3790.5014. We're still, however, having what I believe are SHA2 errors (see below). Some preliminary ...
11
votes
3answers
56k views
Enabling SHA2 Certificate Support on Windows Server 2003
A little background information first. I have an SSIS package that runs inside a Windows Server 2003 SP2 32 bit environment. The package recently started failing with the following error during a ...
2
votes
1answer
536 views
Pass a text file of MD5 Hashes into md5deep
I am using md5deep to try take a list of md5 hashes from a list of files (approximately 100,000 hashes) and I'm comparing them to the NSRL hash list (15gb text file).
I'm trying to accomplish 1 thing:...
