From 82c87c43e0c225160ddc4e69cf06fbda267eddbf Mon Sep 17 00:00:00 2001 From: Kienan Stewart Date: Tue, 14 May 2019 12:15:00 -0400 Subject: [PATCH] Increase blowfish secret length from 24 to 32 Refs #335 --- install/alternc.install | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/install/alternc.install b/install/alternc.install index c367e367..1e980597 100755 --- a/install/alternc.install +++ b/install/alternc.install @@ -240,7 +240,7 @@ fi PUBLIC_IP_BEGIN=$(echo $PUBLIC_IP|cut -c 1) # Secret for PhpMyAdmin sessions -PHPMYADMIN_BLOWFISH="$(generate_string 24)" +PHPMYADMIN_BLOWFISH="$(generate_string 32)" # XXX: I assume this is secure if /tmp is sticky (+t) # we should have a better way to deal with templating, of course.