Fix for Hosts who don't support SHA2, GCM or PKCS5.pbkdf2_hmac

[Asmod4n]

Some Hosts have Compiled Ruby against older Versions of OpenSSL, rendering SHA2, GCM and OpenSSL::PKCS5.pbkdf2_hmac useless.

This fixes it and also incorporates a safer Password checking routine, as seen on http://www.ruby-doc.org/stdlib-2.0/libdoc/openssl/rdoc/OpenSSL/PKCS5.html

[cyx]

Hmm I didn't check hard enough. I might have to revert the change given the backward incompatible nature of the change. Hope you don't mind.

[Asmod4n]

@cyx It was quite late so i forgot that, but i can't test it myself because PBKDF2 always returns nil under ruby 2.0 on my Host.

There is a updated Version of pbkdf2-ruby which fixes it, but he doesn't release the Fix.
https://github.com/emerose/pbkdf2-ruby/blob/master/lib/pbkdf2.rb

[cyx]

Ok got it. I'll take a look at PBKDF2 ruby 2.0 problems.

Asmod4n wrote:

It was quite late so i forgot that, but i can't test it myself because
PBKDF2 always returns nil under ruby 2.0 on my Host.

—
Reply to this email directly or view it on GitHub
#3 (comment).