[Freeciv-Dev] Re: (PR#14350) RSA based authentication

["Jason Short" <jdorje@xxxxxxxxxxxxxxxxxxxxx>]

<URL: http://bugs.freeciv.org/Ticket/Display.html?id=14350 >

Mateusz Stefek wrote:
> <URL: http://bugs.freeciv.org/Ticket/Display.html?id=14350 >
> 
> This patch encrypts passwords sent to the server using RSA algorithm and
> openSSL library.
> 
> The patch misses a feature of reading a key from external file.
> Currently the key is regenerated every time the server is run.

Doesn't that mean the password will be different every time the server 
is run?  Or is the key that is generated always the same?  The latter 
would be fine as all that's needed for passwords is a simple one-way 
encryption.

Also, there shouldn't be needed any server changes for such a patch. 
All that's needed is to encrypt one text password into another text 
password at the client side.

Finally, the feature should perhaps be a compile-time option.

-jason