Merge pull request #5 from noris-network/fix_crypt

Updated crypt's salt to use entire hash

Author: fioannidis-noris

CHANGES.md

@@ -63,3 +63,7 @@ All notable changes to this project will be documented in this file.
 #### 2025-05-30
 
 * `./pysieved/main.py`: Enabled listening to IPv6 addresses in `class Server(SocketServer.ForkingTCPServer)`.
+
+#### 2025-07-14
+
+* `./pysieved/plugins/htpasswd.py`: Used entire `cpass` value as a salt instead of only the first 2 characters.

build_deb.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 
-export BUILD_VERSION=${BUILD_VERSION:-0.2.1}
+export BUILD_VERSION=${BUILD_VERSION:-0.2.2}
 
 docker build -t pysieved-deb-builder .
 docker run --name pysieved-builder pysieved-deb-builder bash -c "

debian/changelog

@@ -1,3 +1,9 @@
+pysieved (0.2.2) jammy; urgency=medium
+
+  * Updated salt for htpasswd authentication
+
+ -- Team noris SKG-PRJ <prj-d@noris.de>  Fri, 14 JUL 2025 15:41:32 +0300
+
 pysieved (0.2.1) jammy; urgency=medium
 
   * Enabled listening on IPv6

pysieved/plugins/htpasswd.py

@@ -18,7 +18,7 @@
 ## Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
 ## USA
 #
-# 24 January 2025 - Modified by F. Ioannidis.
+# 14 July 2025 - Modified by F. Ioannidis.
 
 
 from crypt import crypt
@@ -44,4 +44,4 @@ def auth(self, params):
         except KeyError:
             return False
 
-        return cpass == crypt(params["password"], cpass[:2])
+        return cpass == crypt(params["password"], cpass)

setup.py

@@ -5,7 +5,7 @@
 setup(
     name="pysieved",
     description="Core daemon for the pysieved project",
-    version=os.getenv("BUILD_VERSION", "0.2.1"),
+    version=os.getenv("BUILD_VERSION", "0.2.2"),
     packages=find_packages(where="."),
     entry_points={
         "console_scripts": [