Todo #16958
Updated by Jim Pingle about 2 months ago
When encrypting or decrypting data, the code in @crypt.inc@ uses the passphrase in @openssl@ command line parameters. Though the processes are short-lived, there is a potential the passphrase could be observed by someone using various methods to view the process list.
The code should pass the value through a file, which is safer.
This function is used when encrypting and decrypting configuration backups (manual and via ACB)
Reported by: @lujiefsi