Beefy Boxes and Bandwidth Generously Provided by pair Networks
Syntactic Confectionery Delight

Re: decryption problem

by andyford (Curate)
on Aug 30, 2007 at 18:12 UTC ( #636154=note: print w/ replies, xml ) Need Help??

in reply to decryption problem

Assuming (naively, perhaps!) that the error actually is reporting the problem accurately, and just from general principles, you wouldn't think that a client could modify your hard-coded salt value.

Did you check for some other instance of salt where it's a variable supplied by the client?

I noticed in the module docs that the salt option has something to do with OpenSSL. Could your OpenSSL version have changed in the server switch?

Can you work up a complete broken example?

non-Perl: Andy Ford

Comment on Re: decryption problem
Replies are listed 'Best First'.
Re^2: decryption problem
by Anonymous Monk on Aug 31, 2007 at 15:12 UTC
    Yes, the OpenSSL version may have changed.

    Should I require everyone to change their password, so that it will update the 'salt'? I don't know how it stores the salt, maybe as part of the encrypted string, but I don't know enough about it.

    I will see if I can find out the version differences.

    Now what about data I cannot access at all, because of the salt problem? Is it just lost without hope?

    Thank again!
      What about installing the old server's version of OpenSSL? Sorry I'm not much help, I've never used encryption directly like this, I'm just helping you guess.

      non-Perl: Andy Ford

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://636154]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others romping around the Monastery: (3)
As of 2015-10-09 05:50 GMT
Find Nodes?
    Voting Booth?

    Does Humor Belong in Programming?

    Results (233 votes), past polls