Actions
Todo #16958
closed
JP
JP
Improve handling of OpenSSL encryption passphrase
Todo #16958:
Improve handling of OpenSSL encryption passphrase
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
26.07
Release Notes:
Default
Description
When encrypting or decrypting data, the code in crypt.inc uses the passphrase in openssl command line parameters. Though the processes are short-lived, there is a potential the passphrase could be observed by someone using various methods to view the process list.
The code should pass the value through a file, which is safer.
This function is used when encrypting and decrypting configuration backups (manual and via ACB)
Reported by: @lujiefsi
Files
Actions