Hi

Earlier we have put passwords to mysql table with PHP and following sql script:

insert into table set password = md5('secred')

and now old software will be replaced with new java version, where i have used hibernate.
Does hibernate support same kind functionality, or how to solve problem?
I have tried to create same md5 checksum with java, but it wont work.
MessageDigest md = MessageDigest.getInstance("MD5");
String sec = "secred";
byte out[] = md.digest(sec.getBytes("ASCII"));

Any hints?!??

Artsi

This has been discussed sometimes allready, with the result of it being not officially supported and not that easy to implement yourself. See http://forum.hibernate.org/viewtopic.php?t=251&highlight=password for example.

Thanks, your reply was very fast! i will consult your link.

Artsi

I would suggest you map it as a plain string property and create your own password encryption utility function you use to encrypt the password before setting it on the object or using it in a query. For compatibility with old encrypted passwords, you can make this function call something like "SELECT md5(?) from sometable" through a plain JDBC connection.

Somehow it must also be possible to encrypt passwords the same way as mysql using a MessageDigest.