Everyone,

It occurs to me that I should mention the following regarding this patch - it has been written such that it trims all leading and trailing white space from the password when read in from a file (a somewhat controversial subject).

As I see it, we have four options:
  1. we could just go with a policy of always trimming white space from the password (as reflected by this patch),
  2. we could easily change the code to not trim white space from passwords, or
  3. we could add an optional boolean flag (e. g. - "--pristine" or "--pristine-password") that, when specified, causes white space on passwords to not be trimmed (default is to trim white space), or
  4. we could add an optional boolean flag (e. g. - "--trim" or "--trim-password") that, when specified, causes white space on passwords to be trimmed (default is not to trim white space).

If this is changed, both the code and the man page Caveat needs to be updated to reflect this decision (leading/trailing whitespace will continue to always be trimmed from any specified 'token').

I know that there are several schools of thought on this, so I would like to obtain a consensus opinion on this (if there is too much disagreement, I will implement option (3) above and be done with it).

Thanks,
-- Matt

On 08/07/14 21:20, Matthew Harmsen wrote:
Please review the attached patch (revised) which implements alternative CLI password methods to address the following PKI TRAC ticket:
This revised patch attempts to address most of the comments to the previous patch including:


_______________________________________________
Pki-devel mailing list
Pki-devel@redhat.com
https://www.redhat.com/mailman/listinfo/pki-devel