shadow/man/login.defs.d/HMAC_CRYPTO_ALGO.xml

<!--
   SPDX-FileCopyrightText: 1991 - 1993, Julianne Frances Haugh
   SPDX-FileCopyrightText: 1991 - 1993, Chip Rosenthal
   SPDX-FileCopyrightText: 2007 - 2008, Nicolas François
   SPDX-License-Identifier: BSD-3-Clause
-->
<varlistentry condition="no_pam">
  <term><option>HMAC_CRYPTO_ALGO</option> (string)</term>
  <listitem>
    <para>
      Used to select the HMAC cryptography algorithm that the pam_timestamp
      module is going to use to calculate the keyed-hash message authentication
      code.
    </para>
    <para>
      Note: Check <refentrytitle>hmac</refentrytitle><manvolnum>3</manvolnum>
      to see the possible algorithms that are available in your system.
    </para>
  </listitem>
</varlistentry>
login.defs: include HMAC_CRYPTO_ALGO key Include the new HMAC_CRYPTO_ALGO key that is needed by pam_timestamp to select the algorithm that is going to be used to calculate the message authentication code. pam_timestamp is currently using an embedded algorithm to calculate the HMAC message, but the idea is to improve this behaviour by relying on openssl's implementation. On top of that, the ability to change the algorithm with a simple configuration change allows to simplify the process of removing unsecure algorithms. Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1947294 2021-05-06 20:53:33 +05:30			`<!--`
Update licensing info Closes #238 Update all files to list SPDX license shortname. Most files are BSD 3 clause license. The exceptions are: serge@sl ~/src/shadow$ git grep SPDX-License \| grep -v BSD-3-Clause contrib/atudel:# SPDX-License-Identifier: BSD-4-Clause lib/tcbfuncs.c: * SPDX-License-Identifier: 0BSD libmisc/salt.c: * SPDX-License-Identifier: Unlicense src/login_nopam.c: * SPDX-License-Identifier: Unlicense src/nologin.c: * SPDX-License-Identifier: BSD-2-Clause src/vipw.c: * SPDX-License-Identifier: GPL-2.0-or-later Signed-off-by: Serge Hallyn <serge@hallyn.com> 2021-12-05 21:05:27 +05:30			`SPDX-FileCopyrightText: 1991 - 1993, Julianne Frances Haugh`
			`SPDX-FileCopyrightText: 1991 - 1993, Chip Rosenthal`
			`SPDX-FileCopyrightText: 2007 - 2008, Nicolas François`
			`SPDX-License-Identifier: BSD-3-Clause`
login.defs: include HMAC_CRYPTO_ALGO key Include the new HMAC_CRYPTO_ALGO key that is needed by pam_timestamp to select the algorithm that is going to be used to calculate the message authentication code. pam_timestamp is currently using an embedded algorithm to calculate the HMAC message, but the idea is to improve this behaviour by relying on openssl's implementation. On top of that, the ability to change the algorithm with a simple configuration change allows to simplify the process of removing unsecure algorithms. Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1947294 2021-05-06 20:53:33 +05:30			`-->`
			`<varlistentry condition="no_pam">`
			`<term><option>HMAC_CRYPTO_ALGO</option> (string)</term>`
			`<listitem>`
			`<para>`
			`Used to select the HMAC cryptography algorithm that the pam_timestamp`
			`module is going to use to calculate the keyed-hash message authentication`
			`code.`
			`</para>`
			`<para>`
			`Note: Check <refentrytitle>hmac</refentrytitle><manvolnum>3</manvolnum>`
			`to see the possible algorithms that are available in your system.`
			`</para>`
			`</listitem>`
			`</varlistentry>`