which enhances cookie encryption/decryption by the optional usage of PHP OpenSSL. Unfortunately PHP Mcrypt is not shipped by all Linux distributions however PHP OpenSSL is often enabled by default. PHP < 5.3.4 does not support passing an IV, thus this has been added as a requirement. I could have used 'BF-CBC' rather 'AES-128-CBC' but Blowfish (even it is fast) is seen by experts as weaker algorithm than AES. If this should be a show-stopper for upstream merging just replace 'AES-128-CBC' by 'BF-CBC', please. Patch adapted for 4.3.x and tests modified by Marc Delisle Signed-off-by: Marc Delisle <marc@infomarc.info> |
||
|---|---|---|
| .. | ||
| auth | ||
| export | ||
| import | ||
| schema | ||
| transformations | ||
| AuthenticationPlugin.class.php | ||
| ExportPlugin.class.php | ||
| ImportPlugin.class.php | ||
| IOTransformationsPlugin.class.php | ||
| SchemaPlugin.class.php | ||
| TransformationsInterface.int.php | ||
| TransformationsPlugin.class.php | ||
| UploadInterface.int.php | ||