Beefy Boxes and Bandwidth Generously Provided by pair Networks
P is for Practical
 
PerlMonks  

Re: decryption problem

by andyford (Curate)
on Aug 30, 2007 at 18:12 UTC ( #636154=note: print w/ replies, xml ) Need Help??


in reply to decryption problem

Assuming (naively, perhaps!) that the error actually is reporting the problem accurately, and just from general principles, you wouldn't think that a client could modify your hard-coded salt value.

Did you check for some other instance of salt where it's a variable supplied by the client?

I noticed in the module docs that the salt option has something to do with OpenSSL. Could your OpenSSL version have changed in the server switch?

Can you work up a complete broken example?

non-Perl: Andy Ford


Comment on Re: decryption problem
Re^2: decryption problem
by Anonymous Monk on Aug 31, 2007 at 15:12 UTC
    Yes, the OpenSSL version may have changed.

    Should I require everyone to change their password, so that it will update the 'salt'? I don't know how it stores the salt, maybe as part of the encrypted string, but I don't know enough about it.

    I will see if I can find out the version differences.

    Now what about data I cannot access at all, because of the salt problem? Is it just lost without hope?

    Thank again!
    Rick
      What about installing the old server's version of OpenSSL? Sorry I'm not much help, I've never used encryption directly like this, I'm just helping you guess.

      non-Perl: Andy Ford

Log In?
Username:
Password:

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://636154]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others studying the Monastery: (8)
As of 2014-09-16 12:19 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    How do you remember the number of days in each month?











    Results (15 votes), past polls