openssl-passwd.1ossl 7.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250
  1. .\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42)
  2. .\"
  3. .\" Standard preamble:
  4. .\" ========================================================================
  5. .de Sp \" Vertical space (when we can't use .PP)
  6. .if t .sp .5v
  7. .if n .sp
  8. ..
  9. .de Vb \" Begin verbatim text
  10. .ft CW
  11. .nf
  12. .ne \\$1
  13. ..
  14. .de Ve \" End verbatim text
  15. .ft R
  16. .fi
  17. ..
  18. .\" Set up some character translations and predefined strings. \*(-- will
  19. .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
  20. .\" double quote, and \*(R" will give a right double quote. \*(C+ will
  21. .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
  22. .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
  23. .\" nothing in troff, for use with C<>.
  24. .tr \(*W-
  25. .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
  26. .ie n \{\
  27. . ds -- \(*W-
  28. . ds PI pi
  29. . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
  30. . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
  31. . ds L" ""
  32. . ds R" ""
  33. . ds C` ""
  34. . ds C' ""
  35. 'br\}
  36. .el\{\
  37. . ds -- \|\(em\|
  38. . ds PI \(*p
  39. . ds L" ``
  40. . ds R" ''
  41. . ds C`
  42. . ds C'
  43. 'br\}
  44. .\"
  45. .\" Escape single quotes in literal strings from groff's Unicode transform.
  46. .ie \n(.g .ds Aq \(aq
  47. .el .ds Aq '
  48. .\"
  49. .\" If the F register is >0, we'll generate index entries on stderr for
  50. .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
  51. .\" entries marked with X<> in POD. Of course, you'll have to process the
  52. .\" output yourself in some meaningful fashion.
  53. .\"
  54. .\" Avoid warning from groff about undefined register 'F'.
  55. .de IX
  56. ..
  57. .nr rF 0
  58. .if \n(.g .if rF .nr rF 1
  59. .if (\n(rF:(\n(.g==0)) \{\
  60. . if \nF \{\
  61. . de IX
  62. . tm Index:\\$1\t\\n%\t"\\$2"
  63. ..
  64. . if !\nF==2 \{\
  65. . nr % 0
  66. . nr F 2
  67. . \}
  68. . \}
  69. .\}
  70. .rr rF
  71. .\"
  72. .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
  73. .\" Fear. Run. Save yourself. No user-serviceable parts.
  74. . \" fudge factors for nroff and troff
  75. .if n \{\
  76. . ds #H 0
  77. . ds #V .8m
  78. . ds #F .3m
  79. . ds #[ \f1
  80. . ds #] \fP
  81. .\}
  82. .if t \{\
  83. . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
  84. . ds #V .6m
  85. . ds #F 0
  86. . ds #[ \&
  87. . ds #] \&
  88. .\}
  89. . \" simple accents for nroff and troff
  90. .if n \{\
  91. . ds ' \&
  92. . ds ` \&
  93. . ds ^ \&
  94. . ds , \&
  95. . ds ~ ~
  96. . ds /
  97. .\}
  98. .if t \{\
  99. . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
  100. . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
  101. . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
  102. . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
  103. . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
  104. . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
  105. .\}
  106. . \" troff and (daisy-wheel) nroff accents
  107. .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
  108. .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
  109. .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
  110. .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
  111. .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
  112. .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
  113. .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
  114. .ds ae a\h'-(\w'a'u*4/10)'e
  115. .ds Ae A\h'-(\w'A'u*4/10)'E
  116. . \" corrections for vroff
  117. .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
  118. .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
  119. . \" for low resolution devices (crt and lpr)
  120. .if \n(.H>23 .if \n(.V>19 \
  121. \{\
  122. . ds : e
  123. . ds 8 ss
  124. . ds o a
  125. . ds d- d\h'-1'\(ga
  126. . ds D- D\h'-1'\(hy
  127. . ds th \o'bp'
  128. . ds Th \o'LP'
  129. . ds ae ae
  130. . ds Ae AE
  131. .\}
  132. .rm #[ #] #H #V #F C
  133. .\" ========================================================================
  134. .\"
  135. .IX Title "OPENSSL-PASSWD 1ossl"
  136. .TH OPENSSL-PASSWD 1ossl "2025-06-29" "3.3.2" "OpenSSL"
  137. .\" For nroff, turn off justification. Always turn off hyphenation; it makes
  138. .\" way too many mistakes in technical documents.
  139. .if n .ad l
  140. .nh
  141. .SH "NAME"
  142. openssl\-passwd \- compute password hashes
  143. .SH "SYNOPSIS"
  144. .IX Header "SYNOPSIS"
  145. \&\fBopenssl passwd\fR
  146. [\fB\-help\fR]
  147. [\fB\-1\fR]
  148. [\fB\-apr1\fR]
  149. [\fB\-aixmd5\fR]
  150. [\fB\-5\fR]
  151. [\fB\-6\fR]
  152. [\fB\-salt\fR \fIstring\fR]
  153. [\fB\-in\fR \fIfile\fR]
  154. [\fB\-stdin\fR]
  155. [\fB\-noverify\fR]
  156. [\fB\-quiet\fR]
  157. [\fB\-table\fR]
  158. [\fB\-reverse\fR]
  159. [\fB\-rand\fR \fIfiles\fR]
  160. [\fB\-writerand\fR \fIfile\fR]
  161. [\fB\-provider\fR \fIname\fR]
  162. [\fB\-provider\-path\fR \fIpath\fR]
  163. [\fB\-propquery\fR \fIpropq\fR]
  164. [\fIpassword\fR]
  165. .SH "DESCRIPTION"
  166. .IX Header "DESCRIPTION"
  167. This command computes the hash of a password typed at
  168. run-time or the hash of each password in a list. The password list is
  169. taken from the named file for option \fB\-in\fR, from stdin for
  170. option \fB\-stdin\fR, or from the command line, or from the terminal otherwise.
  171. .SH "OPTIONS"
  172. .IX Header "OPTIONS"
  173. .IP "\fB\-help\fR" 4
  174. .IX Item "-help"
  175. Print out a usage message.
  176. .IP "\fB\-1\fR" 4
  177. .IX Item "-1"
  178. Use the \s-1MD5\s0 based \s-1BSD\s0 password algorithm \fB1\fR (default).
  179. .IP "\fB\-apr1\fR" 4
  180. .IX Item "-apr1"
  181. Use the \fBapr1\fR algorithm (Apache variant of the \s-1BSD\s0 algorithm).
  182. .IP "\fB\-aixmd5\fR" 4
  183. .IX Item "-aixmd5"
  184. Use the \fB\s-1AIX MD5\s0\fR algorithm (\s-1AIX\s0 variant of the \s-1BSD\s0 algorithm).
  185. .IP "\fB\-5\fR" 4
  186. .IX Item "-5"
  187. .PD 0
  188. .IP "\fB\-6\fR" 4
  189. .IX Item "-6"
  190. .PD
  191. Use the \fB\s-1SHA256\s0\fR / \fB\s-1SHA512\s0\fR based algorithms defined by Ulrich Drepper.
  192. See <https://www.akkadia.org/drepper/SHA\-crypt.txt>.
  193. .IP "\fB\-salt\fR \fIstring\fR" 4
  194. .IX Item "-salt string"
  195. Use the specified salt.
  196. When reading a password from the terminal, this implies \fB\-noverify\fR.
  197. .IP "\fB\-in\fR \fIfile\fR" 4
  198. .IX Item "-in file"
  199. Read passwords from \fIfile\fR.
  200. .IP "\fB\-stdin\fR" 4
  201. .IX Item "-stdin"
  202. Read passwords from \fBstdin\fR.
  203. .IP "\fB\-noverify\fR" 4
  204. .IX Item "-noverify"
  205. Don't verify when reading a password from the terminal.
  206. .IP "\fB\-quiet\fR" 4
  207. .IX Item "-quiet"
  208. Don't output warnings when passwords given at the command line are truncated.
  209. .IP "\fB\-table\fR" 4
  210. .IX Item "-table"
  211. In the output list, prepend the cleartext password and a \s-1TAB\s0 character
  212. to each password hash.
  213. .IP "\fB\-reverse\fR" 4
  214. .IX Item "-reverse"
  215. When the \fB\-table\fR option is used, reverse the order of cleartext and hash.
  216. .IP "\fB\-rand\fR \fIfiles\fR, \fB\-writerand\fR \fIfile\fR" 4
  217. .IX Item "-rand files, -writerand file"
  218. See \*(L"Random State Options\*(R" in \fBopenssl\fR\|(1) for details.
  219. .IP "\fB\-provider\fR \fIname\fR" 4
  220. .IX Item "-provider name"
  221. .PD 0
  222. .IP "\fB\-provider\-path\fR \fIpath\fR" 4
  223. .IX Item "-provider-path path"
  224. .IP "\fB\-propquery\fR \fIpropq\fR" 4
  225. .IX Item "-propquery propq"
  226. .PD
  227. See \*(L"Provider Options\*(R" in \fBopenssl\fR\|(1), \fBprovider\fR\|(7), and \fBproperty\fR\|(7).
  228. .SH "EXAMPLES"
  229. .IX Header "EXAMPLES"
  230. .Vb 2
  231. \& % openssl passwd \-1 \-salt xxxxxxxx password
  232. \& $1$xxxxxxxx$UYCIxa628.9qXjpQCjM4a.
  233. \&
  234. \& % openssl passwd \-apr1 \-salt xxxxxxxx password
  235. \& $apr1$xxxxxxxx$dxHfLAsjHkDRmG83UXe8K0
  236. \&
  237. \& % openssl passwd \-aixmd5 \-salt xxxxxxxx password
  238. \& xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/
  239. .Ve
  240. .SH "HISTORY"
  241. .IX Header "HISTORY"
  242. The \fB\-crypt\fR option was removed in OpenSSL 3.0.
  243. .SH "COPYRIGHT"
  244. .IX Header "COPYRIGHT"
  245. Copyright 2000\-2021 The OpenSSL Project Authors. All Rights Reserved.
  246. .PP
  247. Licensed under the Apache License 2.0 (the \*(L"License\*(R"). You may not use
  248. this file except in compliance with the License. You can obtain a copy
  249. in the file \s-1LICENSE\s0 in the source distribution or at
  250. <https://www.openssl.org/source/license.html>.