mirror of
https://github.com/kernelkit/infix.git
synced 2026-07-31 21:13:00 +02:00
Joachim Wiberg
3e7340cb52
Finalize support for IETF System YANG incl. all IANA crypt-hash types. This patch builds on the earlier work adding yescrypt and $factory$ key word. The YANG description for the crypt-hash type override has been significantly udpated to discourage use of $0$cleartext passwords. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
50 lines
1.2 KiB
Plaintext
50 lines
1.2 KiB
Plaintext
config BR2_PACKAGE_CONFD
|
|
bool "confd"
|
|
select BR2_PACKAGE_JANSSON
|
|
select BR2_PACKAGE_LIBITE
|
|
select BR2_PACKAGE_NETOPEER2
|
|
select BR2_PACKAGE_SYSREPO
|
|
select BR2_PACKAGE_LIBSRX
|
|
help
|
|
A plugin to sysrepo that provides the core YANG models used to
|
|
manage an Infix based system. Configuration can be done using
|
|
either the on-system CLI or using NETCONF.
|
|
|
|
https://github.com/kernelkit/infix
|
|
|
|
if BR2_PACKAGE_CONFD
|
|
|
|
choice
|
|
prompt "Default password crypt"
|
|
default BR2_PACKAGE_CONFD_YESCRYPT
|
|
help
|
|
When users set $0$cleartext-password as their password confd
|
|
salts and encrypts the "cleartext-password" with this selected
|
|
hash algorithm.
|
|
|
|
Infix defaults to yescrypt.
|
|
|
|
config BR2_PACKAGE_CONFD_MD5CRYPT
|
|
bool "md5crypt"
|
|
help
|
|
|
|
config BR2_PACKAGE_CONFD_SHA256CRYPT
|
|
bool "sha256crypt"
|
|
|
|
config BR2_PACKAGE_CONFD_SHA512CRYPT
|
|
bool "sha512crypt"
|
|
|
|
config BR2_PACKAGE_CONFD_YESCRYPT
|
|
bool "yescrypt"
|
|
|
|
endchoice
|
|
|
|
config BR2_PACKAGE_CONFD_DEFAULT_CRYPT
|
|
string
|
|
default "md5crypt" if BR2_PACKAGE_CONFD_MD5CRYPT
|
|
default "sha256crypt" if BR2_PACKAGE_CONFD_SHA256CRYPT
|
|
default "sha512crypt" if BR2_PACKAGE_CONFD_SHA512CRYPT
|
|
default "yescrypt" if BR2_PACKAGE_CONFD_YESCRYPT
|
|
|
|
endif
|