From 8c8f2aebc58bdfca948e5dc01bcf6d27a5d09f6e Mon Sep 17 00:00:00 2001
From: Barry Warsaw
Date: Wed, 26 Dec 2012 18:55:45 -0500
Subject:  * A user's password can be verified by POSTing to
 .../user/<id>/login.  The    data must contain a single parameter
 `cleartext_password` and if this    matches, a 204 (No Content) will be
 returned, otherwise a 403 (Forbidden)    is returned.  (LP: #1065447)

---
 src/mailman/testing/passlib.cfg | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

(limited to 'src/mailman/testing')

diff --git a/src/mailman/testing/passlib.cfg b/src/mailman/testing/passlib.cfg
index 225ecd49b..2779ed89d 100644
--- a/src/mailman/testing/passlib.cfg
+++ b/src/mailman/testing/passlib.cfg
@@ -1,4 +1,10 @@
 [passlib]
 # Use a predictable hashing algorithm with plain text and no salt.  This is
 # *only* useful for debugging and unit testing.
-schemes = roundup_plaintext
+#
+# We add the hex_md5 scheme for hash migration tests.  The old hash will be
+# hex_md5 (which is not salted and thus reproducible), but since this is
+# deprecated here, it will get "ugpraded" to roundup_plaintext when
+# successfully verified.
+schemes = roundup_plaintext, hex_md5
+deprecated = hex_md5
-- 
cgit v1.3.1