* `passlib`_ is now used for all password hashing instead of flufl.password.

   The default hash is `sha512_crypt`.  (LP: #1015758)
 * Events renamed and moved:
   * `mailman.chains.accept.AcceptNotification`
   * `mailman.chains.base.ChainNotification`
   * `mailman.chains.discard.DiscardNotification`
   * `mailman.chains.hold.HoldNotification`
   * `mailman.chains.owner.OwnerNotification`
   * `mailman.chains.reject.RejectNotification`
   changed to (respectively):
   * `mailman.interfaces.chains.AcceptEvent`
   * `mailman.interfaces.chains.ChainEvent`
   * `mailman.interfaces.chains.DiscardEvent`
   * `mailman.interfaces.chains.HoldEvent`
   * `mailman.interfaces.chains.AcceptOwnerEvent`
   * `mailman.interfaces.chains.RejectEvent`
 * A `ConfigurationUpdatedEvent` is triggered when the system-wide global
   configuration stack is pushed or popped.
 * With the switch to `passlib`_, `[passwords]password_scheme` has been
   removed.  Instead use `[passwords]path` to specify where to find the
   `passlib.cfg` file.  See the comments in `schema.cfg` for details.

1 files changed, 9 insertions, 3 deletions

diff --git a/src/mailman/rules/approved.py b/src/mailman/rules/approved.py
index 1f4fc1369..3ff7d21ec 100644
--- a/src/mailman/rules/approved.py
+++ b/src/mailman/rules/approved.py
@@ -28,9 +28,9 @@ __all__ = [
 import re
 
 from email.iterators import typed_subpart_iterator
-from flufl.password import verify
 from zope.interface import implementer
 
+from mailman.config import config
 from mailman.core.i18n import _
 from mailman.interfaces.rules import IRule
 
@@ -119,8 +119,14 @@ class Approved:
         else:
             for header in HEADERS:
                 del msg[header]
-        return (password is not missing and
-                verify(mlist.moderator_password, password))
+        if password is missing:
+            return False
+        is_valid, new_hash = config.password_context.verify(
+            mlist.moderator_password, password)
+        if is_valid and new_hash:
+            # Hash algorithm migration.
+            mlist.moderator_password = new_hash
+        return is_valid