Remove client usage of md5

[clamp.git] / README.md

diff --git a/README.md b/README.md
index f9a3414..d129e5b 100644 (file)
--- a/README.md
+++ b/README.md
@@ -98,10 +98,10 @@ You can see the swagger definition for the jaxrs apis at `/restservices/clds/v1/
 \r
 Credentials should be specified in `src/main/resources/clds/clds-users.json`. You might specify you own credential file by redefining the `clamp.config.files.cldsUsers` in `application.properties`.\r
 \r
-Passwords should be hashed using md5, then using Bcrypt :\r
+Passwords should be hashed using Bcrypt :\r
 ```\r
 # pip3 install bcrypt  # if you don't have the bcrypt python lib installed, should be done once.\r
-# python3 -c 'import bcrypt; import hashlib; m = hashlib.md5(); m.update("password".encode()); m.hexdigest(); print(bcrypt.hashpw(m.hexdigest().encode(), bcrypt.gensalt(rounds=10, prefix=b"2a")))'\r
+# python3 -c 'import bcrypt; print(bcrypt.hashpw("password".encode(), bcrypt.gensalt(rounds=10, prefix=b"2a")))'\r
 ```\r
 \r
 Default credentials are admin/password and cs0008/password.\r