[Checkins] [zopefoundation/zope.password] 0a02ed: Back to development: 3.6.2

Fri Feb 22 04:52:29 UTC 2013

  Branch: refs/heads/master
  Home:   https://github.com/zopefoundation/zope.password
  Commit: 0a02eda1549f171c16afb09a84a96433028b8579
      https://github.com/zopefoundation/zope.password/commit/0a02eda1549f171c16afb09a84a96433028b8579
  Author: Jan-Wijbrand Kolman <janwijbrand at gmail.com>
  Date:   2010-05-27 (Thu, 27 May 2010)

  Changed paths:
    M CHANGES.txt
    M setup.py

  Log Message:
  -----------
  Back to development: 3.6.2

  Commit: ec83d4197fc3597a945bf8fb16b07e411ee2d8c4
      https://github.com/zopefoundation/zope.password/commit/ec83d4197fc3597a945bf8fb16b07e411ee2d8c4
  Author: Tres Seaver <tseaver at palladion.com>
  Date:   2010-06-03 (Thu, 03 Jun 2010)

  Changed paths:
    M bootstrap.py
    M setup.py
    M src/zope/password/__init__.py
    M src/zope/password/interfaces.py
    M src/zope/password/password.py
    M src/zope/password/testing.py
    M src/zope/password/tests/__init__.py
    M src/zope/password/tests/test_password.py
    M src/zope/password/tests/test_zpasswd.py
    M src/zope/password/vocabulary.py
    M src/zope/password/zpasswd.py

  Log Message:
  -----------
  Remove CVS-era Id fossils.

  Commit: 77fb0ec0796ec0bfe8a4712c30d0220bed06b4a9
      https://github.com/zopefoundation/zope.password/commit/77fb0ec0796ec0bfe8a4712c30d0220bed06b4a9
  Author: Gediminas Paulauskas <menesis at pov.lt>
  Date:   2010-12-23 (Thu, 23 Dec 2010)

  Changed paths:
    M src/zope/password/password.py

  Log Message:
  -----------
  Fix ZPL version in file headers

  Commit: b29d263fc6ac97ac22c66f4d526ea1c2fec34374
      https://github.com/zopefoundation/zope.password/commit/b29d263fc6ac97ac22c66f4d526ea1c2fec34374
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M README.txt
    M setup.py
    M src/zope/password/interfaces.py
    M src/zope/password/password.py

  Log Message:
  -----------
  Add a 'match' method to the IPasswordManager interface, which returns True if a given password hash was encdoded with the scheme implemented by the specific manager.

Note that the plain-text manager always returns False for this method, as the alternative is to always return True and thus also validate hashed password against their literal values, a security risk.

  Commit: fc5a0b047337504027ab59e13ec363c628089154
      https://github.com/zopefoundation/zope.password/commit/fc5a0b047337504027ab59e13ec363c628089154
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M src/zope/password/password.py

  Log Message:
  -----------
  Use {SHA} instead of {SHA1} to be compatible with LDAP (RFC 2307).

We still support checking against password hashes prefixed with {SHA1}.

  Commit: 23df21e53554ad504024115085d36e3c6955801c
      https://github.com/zopefoundation/zope.password/commit/23df21e53554ad504024115085d36e3c6955801c
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/password.py

  Log Message:
  -----------
  Clean up SSHA test, turning a redundant test into something that actually covers the issue at hand.

  Commit: 86d125ec5926b375162b27411bcb3044f3c6eacb
      https://github.com/zopefoundation/zope.password/commit/86d125ec5926b375162b27411bcb3044f3c6eacb
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M src/zope/password/configure.zcml
    A src/zope/password/legacy.py
    M src/zope/password/testing.py
    M src/zope/password/tests/test_password.py

  Log Message:
  -----------
  Add a crypt password manager.

  Commit: 7739431dac480f7a7e8ef7cd77eb81c9d169a471
      https://github.com/zopefoundation/zope.password/commit/7739431dac480f7a7e8ef7cd77eb81c9d169a471
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M src/zope/password/configure.zcml
    M src/zope/password/legacy.py
    M src/zope/password/testing.py

  Log Message:
  -----------
  Port AccessControl.AuthEncoding.MySQLDigestScheme to zope.password.

This is very much a legacy scheme, encoding to a very weak 16 bit hash with no salt support.

  Commit: d91ba41517efd10a1c103242164c8ca6b13d8095
      https://github.com/zopefoundation/zope.password/commit/d91ba41517efd10a1c103242164c8ca6b13d8095
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M README.txt
    M setup.py
    M src/zope/password/configure.zcml
    M src/zope/password/interfaces.py
    M src/zope/password/legacy.py
    M src/zope/password/password.py
    M src/zope/password/testing.py

  Log Message:
  -----------
  Keep things backwards compatible by creating an extended interface.

By moving the match method to a IMatchingPasswordManager, we keep the original interface unchanged and thus backwards compatible. Users of zope.password that require the new functionality can test for the new interface.

  Commit: 3211ec9d7fe059956d017b677916257ef90abb30
      https://github.com/zopefoundation/zope.password/commit/3211ec9d7fe059956d017b677916257ef90abb30
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M README.txt

  Log Message:
  -----------
  Correct spelling.

  Commit: 03bc51c4841b7f4abadec29476f30b85b9f09855
      https://github.com/zopefoundation/zope.password/commit/03bc51c4841b7f4abadec29476f30b85b9f09855
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M README.txt

  Log Message:
  -----------
  Add the 2 new legacy managers to the readme.

  Commit: e4f0fb108f035c93117f1e005957baeab429980c
      https://github.com/zopefoundation/zope.password/commit/e4f0fb108f035c93117f1e005957baeab429980c
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M README.txt
    M src/zope/password/password.py

  Log Message:
  -----------
  Remove the completely useless 'cosmetic' salt from the MD5 manager.

The generated salt was not being used to generate the actual hash and had no
cryptographic meaning. It only served to make the output incompatible with
RFC 2307 MD5 implementations. Any encoded input with the salt still in place are still supported for password checks.

  Commit: 6f0e2bef1a0ea68a01333ebd66c3090a5c015196
      https://github.com/zopefoundation/zope.password/commit/6f0e2bef1a0ea68a01333ebd66c3090a5c015196
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/password.py

  Log Message:
  -----------
  Remove now redundant test.

  Commit: 7e7e2eb4b82af3a601a5614c7b92f30808123095
      https://github.com/zopefoundation/zope.password/commit/7e7e2eb4b82af3a601a5614c7b92f30808123095
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M README.txt
    M src/zope/password/password.py

  Log Message:
  -----------
  Remove the 'cosmetic' salt from the SHA1 implementation as well, update docs.

  Commit: 5c61d377164235bf6c82392ce6a0bbcec56720a7
      https://github.com/zopefoundation/zope.password/commit/5c61d377164235bf6c82392ce6a0bbcec56720a7
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/password.py

  Log Message:
  -----------
  LDAP does not use the URL-safe base64 encoding! See http://www.openldap.org/faq/data/cache/347.html.

Correct to use the standard encoding instead.

  Commit: 21adafa1ce5ee0af05e701818c909329985b1adf
      https://github.com/zopefoundation/zope.password/commit/21adafa1ce5ee0af05e701818c909329985b1adf
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M src/zope/password/password.py

  Log Message:
  -----------
  Maintain backwards compatibility to older hashes encoded with urlsafe.

Update documentation as well.

  Commit: d4551f7df65b3a175f3d83e0996e426cfaceb6c0
      https://github.com/zopefoundation/zope.password/commit/d4551f7df65b3a175f3d83e0996e426cfaceb6c0
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/password.py

  Log Message:
  -----------
  Newly generated slappasswd example with / and + to test base64 assertions.

Note that with a different salt there are / and + characters in the slappasswd output showing that the urlsafe_base64 assumption from before is incorrect.

  Commit: 1b10fb6b015f89bc7a6494452a5e5eca8776bed1
      https://github.com/zopefoundation/zope.password/commit/1b10fb6b015f89bc7a6494452a5e5eca8776bed1
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/password.py

  Log Message:
  -----------
  Correct slappasswd test to actually use the new salt, and fix urlsafe case.

The urlsafe backwards compatible mode is now covered with a test and actually works.

  Commit: 21211c36ae93268d8f2d5b8ffb068bb93f2c9b67
      https://github.com/zopefoundation/zope.password/commit/21211c36ae93268d8f2d5b8ffb068bb93f2c9b67
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M src/zope/password/password.py

  Log Message:
  -----------
  Make SHA and MD5 output compatible with LDAP schemes.

This means using base64 output instead of hexdigests. We still support checking passwords against the old format.

  Commit: e85cdccfb4612ab3c20a9359999163e1e017dcab
      https://github.com/zopefoundation/zope.password/commit/e85cdccfb4612ab3c20a9359999163e1e017dcab
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt

  Log Message:
  -----------
  typo.

  Commit: 2b3987ecf45b14fdb7c18bebd61269efc534ec7c
      https://github.com/zopefoundation/zope.password/commit/2b3987ecf45b14fdb7c18bebd61269efc534ec7c
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/password.py

  Log Message:
  -----------
  Update several tests to cover the unicode hash input case better, and update the description of the salt-means-random-output test for SSHA.

  Commit: 9fe94add53e7626ee64b1ece3971ab0659facc0f
      https://github.com/zopefoundation/zope.password/commit/9fe94add53e7626ee64b1ece3971ab0659facc0f
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/configure.zcml

  Log Message:
  -----------
  Register security assertions for  the legacy classes.

  Commit: 308a5bbaeda5220308249dee16da1f5923b90995
      https://github.com/zopefoundation/zope.password/commit/308a5bbaeda5220308249dee16da1f5923b90995
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M CHANGES.txt
    M README.txt
    M src/zope/password/configure.zcml
    M src/zope/password/password.py
    M src/zope/password/testing.py

  Log Message:
  -----------
  Add a SMD5 (salted MD5) implementation, compatible with OpenLDAP.

  Commit: a04f58912591f27d7333cd4f07128edd639102b4
      https://github.com/zopefoundation/zope.password/commit/a04f58912591f27d7333cd4f07128edd639102b4
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/configure.zcml
    M src/zope/password/testing.py

  Log Message:
  -----------
  Just case the MySQL utility registration the same as the project name.

  Commit: 8c92e8ea757b0924bff8a8df23c8fc2258cd8b60
      https://github.com/zopefoundation/zope.password/commit/8c92e8ea757b0924bff8a8df23c8fc2258cd8b60
  Author: Martijn Pieters <mj at zopatista.co>
  Date:   2011-02-20 (Sun, 20 Feb 2011)

  Changed paths:
    M src/zope/password/legacy.py

  Log Message:
  -----------
  Style: double newline between classes.

  Commit: ff5b7830550b8bcd737531592ff15be804e31c01
      https://github.com/zopefoundation/zope.password/commit/ff5b7830550b8bcd737531592ff15be804e31c01
  Author: Tres Seaver <tseaver at palladion.com>
  Date:   2012-05-17 (Thu, 17 May 2012)

  Changed paths:
    M CHANGES.txt
    M setup.py
    M src/zope/password/legacy.py
    M src/zope/password/password.py

  Log Message:
  -----------
  Drop support for Python 2.4 and 2.5.

Replace deprecated 'zope.interface.implements' usage with equivalent
'zope.interface.implementer' decorator.

  Commit: 1920bbc50be21fb0f8c6a533ed4c7c275341d8bb
      https://github.com/zopefoundation/zope.password/commit/1920bbc50be21fb0f8c6a533ed4c7c275341d8bb
  Author: Stephan Richter <stephan.richter at gmail.com>
  Date:   2013-02-21 (Thu, 21 Feb 2013)

  Changed paths:
    M CHANGES.txt
    A MANIFEST.in
    M bootstrap.py
    M buildout.cfg
    M setup.py
    M src/zope/password/interfaces.py
    M src/zope/password/legacy.py
    M src/zope/password/password.py
    M src/zope/password/testing.py
    M src/zope/password/tests/test_password.py
    M src/zope/password/tests/test_zpasswd.py
    M src/zope/password/zpasswd.py
    A tox.ini

  Log Message:
  -----------
  Support Py 3.3, add tox setup and manifest.

  Commit: cf3c8a7449bd41e5bfcdc1f7bfb5e6d9116d29f3
      https://github.com/zopefoundation/zope.password/commit/cf3c8a7449bd41e5bfcdc1f7bfb5e6d9116d29f3
  Author: Stephan Richter <stephan.richter at gmail.com>
  Date:   2013-02-21 (Thu, 21 Feb 2013)

  Changed paths:
    M CHANGES.txt
    M setup.py

  Log Message:
  -----------
  Preparing release 4.0.0

  Commit: 953157fbb9f3597a849a5f0382bebbc297407621
      https://github.com/zopefoundation/zope.password/commit/953157fbb9f3597a849a5f0382bebbc297407621
  Author: Stephan Richter <stephan.richter at gmail.com>
  Date:   2013-02-21 (Thu, 21 Feb 2013)

  Changed paths:
    M CHANGES.txt
    M setup.py

  Log Message:
  -----------
  Back to development: 4.0.1

Compare: https://github.com/zopefoundation/zope.password/compare/0a02eda1549f^...953157fbb9f3