[Tickets #11566] when setting session.hash_function to sha512, horde can't auth/decrypt anymore

bugs at horde.org bugs at horde.org
Sun Oct 21 00:58:15 UTC 2012


BITTE NICHT AUF DIESE NACHRICHT ANTWORTEN. NACHRICHTEN AN DIESE  
E-MAIL-ADRESSE WERDEN NICHT GELESEN.

Ticket-URL: http://bugs.horde.org/ticket/11566
------------------------------------------------------------------------------
  Ticket           | 11566
  Erstellt Von     | jonathan at tietznet.de
  Zusammenfassung  | when setting session.hash_function to sha512, horde can't
                   | auth/decrypt anymore
  Warteschlange    | Horde Framework Packages
  Version          | FRAMEWORK_4
  Typ              | Bug
  Status           | Unconfirmed
  Priorität        | 3. High
  Milestone        |
  Patch            |
  Zuständige       |
------------------------------------------------------------------------------


jonathan at tietznet.de (2012-10-21 00:58) hat geschrieben:

Hi,

with PHP 5.3 you can use a different hash_function other than md5, see  
http://www.php.net/manual/en/session.configuration.php#ini.session.hash-function

in my php.ini i tried this:
session.hash_function = sha512

Horde can't decrypt auth anymore:
2012-10-21T02:40:38+02:00 ERR: HORDE [horde] Key must be less than 56  
characters and non-zero. Supplied key length: 103 [pid 1950 on line  
114 of "/usr/share/php/Horde/Secret.php"]

and further login fails







More information about the bugs mailing list