Ticket #6028: md5-crypt-as-algo-name.diff

django/contrib/auth/models.py

@@ -19 +19 @@
 def get_hexdigest(algorithm, salt, raw_password):
     """
     Returns a string of the hexdigest of the given plaintext password and salt
-    using the given algorithm ('md5', 'sha1' or 'crypt').
+    using the given algorithm ('md5', 'sha1', 'crypt' or 'md5-crypt').
     """
     raw_password, salt = smart_str(raw_password), smart_str(salt)
-    if algorithm == 'crypt':
+    if algorithm in ('crypt', 'md5-crypt'):
         try:
             import crypt
         except ImportError:
@@ -51 +51 @@
     Returns a boolean of whether the raw_password was correct. Handles
     encryption formats behind the scenes.
     """
-    algo, salt, hsh = enc_password.split('$')
+    algo, salt_and_hash = enc_password.split('$', 1)
+    if algo == 'md5-crypt':
+        salt = hsh = salt_and_hash
+    else:
+        salt, hsh = salt_and_hash.rsplit('$', 1)
     return hsh == get_hexdigest(algo, salt, raw_password)
 
 class SiteProfileNotAvailable(Exception):