openssl-passwd.1ossl 4.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172
  1. .\" -*- mode: troff; coding: utf-8 -*-
  2. .\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43)
  3. .\"
  4. .\" Standard preamble:
  5. .\" ========================================================================
  6. .de Sp \" Vertical space (when we can't use .PP)
  7. .if t .sp .5v
  8. .if n .sp
  9. ..
  10. .de Vb \" Begin verbatim text
  11. .ft CW
  12. .nf
  13. .ne \\$1
  14. ..
  15. .de Ve \" End verbatim text
  16. .ft R
  17. .fi
  18. ..
  19. .\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>.
  20. .ie n \{\
  21. . ds C` ""
  22. . ds C' ""
  23. 'br\}
  24. .el\{\
  25. . ds C`
  26. . ds C'
  27. 'br\}
  28. .\"
  29. .\" Escape single quotes in literal strings from groff's Unicode transform.
  30. .ie \n(.g .ds Aq \(aq
  31. .el .ds Aq '
  32. .\"
  33. .\" If the F register is >0, we'll generate index entries on stderr for
  34. .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
  35. .\" entries marked with X<> in POD. Of course, you'll have to process the
  36. .\" output yourself in some meaningful fashion.
  37. .\"
  38. .\" Avoid warning from groff about undefined register 'F'.
  39. .de IX
  40. ..
  41. .nr rF 0
  42. .if \n(.g .if rF .nr rF 1
  43. .if (\n(rF:(\n(.g==0)) \{\
  44. . if \nF \{\
  45. . de IX
  46. . tm Index:\\$1\t\\n%\t"\\$2"
  47. ..
  48. . if !\nF==2 \{\
  49. . nr % 0
  50. . nr F 2
  51. . \}
  52. . \}
  53. .\}
  54. .rr rF
  55. .\" ========================================================================
  56. .\"
  57. .IX Title "OPENSSL-PASSWD 1ossl"
  58. .TH OPENSSL-PASSWD 1ossl 2025-01-17 3.4.0 OpenSSL
  59. .\" For nroff, turn off justification. Always turn off hyphenation; it makes
  60. .\" way too many mistakes in technical documents.
  61. .if n .ad l
  62. .nh
  63. .SH NAME
  64. openssl\-passwd \- compute password hashes
  65. .SH SYNOPSIS
  66. .IX Header "SYNOPSIS"
  67. \&\fBopenssl passwd\fR
  68. [\fB\-help\fR]
  69. [\fB\-1\fR]
  70. [\fB\-apr1\fR]
  71. [\fB\-aixmd5\fR]
  72. [\fB\-5\fR]
  73. [\fB\-6\fR]
  74. [\fB\-salt\fR \fIstring\fR]
  75. [\fB\-in\fR \fIfile\fR]
  76. [\fB\-stdin\fR]
  77. [\fB\-noverify\fR]
  78. [\fB\-quiet\fR]
  79. [\fB\-table\fR]
  80. [\fB\-reverse\fR]
  81. [\fB\-rand\fR \fIfiles\fR]
  82. [\fB\-writerand\fR \fIfile\fR]
  83. [\fB\-provider\fR \fIname\fR]
  84. [\fB\-provider\-path\fR \fIpath\fR]
  85. [\fB\-propquery\fR \fIpropq\fR]
  86. [\fIpassword\fR]
  87. .SH DESCRIPTION
  88. .IX Header "DESCRIPTION"
  89. This command computes the hash of a password typed at
  90. run-time or the hash of each password in a list. The password list is
  91. taken from the named file for option \fB\-in\fR, from stdin for
  92. option \fB\-stdin\fR, or from the command line, or from the terminal otherwise.
  93. .SH OPTIONS
  94. .IX Header "OPTIONS"
  95. .IP \fB\-help\fR 4
  96. .IX Item "-help"
  97. Print out a usage message.
  98. .IP \fB\-1\fR 4
  99. .IX Item "-1"
  100. Use the MD5 based BSD password algorithm \fB1\fR (default).
  101. .IP \fB\-apr1\fR 4
  102. .IX Item "-apr1"
  103. Use the \fBapr1\fR algorithm (Apache variant of the BSD algorithm).
  104. .IP \fB\-aixmd5\fR 4
  105. .IX Item "-aixmd5"
  106. Use the \fBAIX MD5\fR algorithm (AIX variant of the BSD algorithm).
  107. .IP \fB\-5\fR 4
  108. .IX Item "-5"
  109. .PD 0
  110. .IP \fB\-6\fR 4
  111. .IX Item "-6"
  112. .PD
  113. Use the \fBSHA256\fR / \fBSHA512\fR based algorithms defined by Ulrich Drepper.
  114. See <https://www.akkadia.org/drepper/SHA\-crypt.txt>.
  115. .IP "\fB\-salt\fR \fIstring\fR" 4
  116. .IX Item "-salt string"
  117. Use the specified salt.
  118. When reading a password from the terminal, this implies \fB\-noverify\fR.
  119. .IP "\fB\-in\fR \fIfile\fR" 4
  120. .IX Item "-in file"
  121. Read passwords from \fIfile\fR.
  122. .IP \fB\-stdin\fR 4
  123. .IX Item "-stdin"
  124. Read passwords from \fBstdin\fR.
  125. .IP \fB\-noverify\fR 4
  126. .IX Item "-noverify"
  127. Don't verify when reading a password from the terminal.
  128. .IP \fB\-quiet\fR 4
  129. .IX Item "-quiet"
  130. Don't output warnings when passwords given at the command line are truncated.
  131. .IP \fB\-table\fR 4
  132. .IX Item "-table"
  133. In the output list, prepend the cleartext password and a TAB character
  134. to each password hash.
  135. .IP \fB\-reverse\fR 4
  136. .IX Item "-reverse"
  137. When the \fB\-table\fR option is used, reverse the order of cleartext and hash.
  138. .IP "\fB\-rand\fR \fIfiles\fR, \fB\-writerand\fR \fIfile\fR" 4
  139. .IX Item "-rand files, -writerand file"
  140. See "Random State Options" in \fBopenssl\fR\|(1) for details.
  141. .IP "\fB\-provider\fR \fIname\fR" 4
  142. .IX Item "-provider name"
  143. .PD 0
  144. .IP "\fB\-provider\-path\fR \fIpath\fR" 4
  145. .IX Item "-provider-path path"
  146. .IP "\fB\-propquery\fR \fIpropq\fR" 4
  147. .IX Item "-propquery propq"
  148. .PD
  149. See "Provider Options" in \fBopenssl\fR\|(1), \fBprovider\fR\|(7), and \fBproperty\fR\|(7).
  150. .SH EXAMPLES
  151. .IX Header "EXAMPLES"
  152. .Vb 2
  153. \& % openssl passwd \-1 \-salt xxxxxxxx password
  154. \& $1$xxxxxxxx$UYCIxa628.9qXjpQCjM4a.
  155. \&
  156. \& % openssl passwd \-apr1 \-salt xxxxxxxx password
  157. \& $apr1$xxxxxxxx$dxHfLAsjHkDRmG83UXe8K0
  158. \&
  159. \& % openssl passwd \-aixmd5 \-salt xxxxxxxx password
  160. \& xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/
  161. .Ve
  162. .SH HISTORY
  163. .IX Header "HISTORY"
  164. The \fB\-crypt\fR option was removed in OpenSSL 3.0.
  165. .SH COPYRIGHT
  166. .IX Header "COPYRIGHT"
  167. Copyright 2000\-2021 The OpenSSL Project Authors. All Rights Reserved.
  168. .PP
  169. Licensed under the Apache License 2.0 (the "License"). You may not use
  170. this file except in compliance with the License. You can obtain a copy
  171. in the file LICENSE in the source distribution or at
  172. <https://www.openssl.org/source/license.html>.