You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In PHP 7.2 they are officially removing mcrypt from the PHP library (it was marked as deprecated in 7.1), so in order to keep the project compatible on the newest versions of PHP, the use of Mcrypt in the Salt Service will need to be migrated to use OpenSSL instead, and a suitable way to convert values generated by Mcrypt to values created by OpenSSL will be needed too.
The text was updated successfully, but these errors were encountered:
This was actually way easier than I at one point thought, and I erroneously dove down the rabbit hole of completely re-doing the auth scheme in the app (which I've come to the conclusion will require moving off of Silex, and onto Symfony 4 - a future item, but a large refactor). Instead, just replace the mcrypt method and call it a day. Old salts generated with mcrypt are OK, the primary concern here is not one of security, but rather platform compatibility. PHP7.2 servers won't be able to have mcrypt installed, but OpenSSL comes by default.
In PHP 7.2 they are officially removing mcrypt from the PHP library (it was marked as deprecated in 7.1), so in order to keep the project compatible on the newest versions of PHP, the use of Mcrypt in the Salt Service will need to be migrated to use OpenSSL instead, and a suitable way to convert values generated by Mcrypt to values created by OpenSSL will be needed too.
The text was updated successfully, but these errors were encountered: