[Tickets #13869] Re: credentials of remote calendars from prefs not decoded correctly

[noreply at bugs.horde.org]

BITTE NICHT AUF DIESE NACHRICHT ANTWORTEN. NACHRICHTEN AN DIESE  
E-MAIL-ADRESSE WERDEN NICHT GELESEN.

Ticket-URL: https://bugs.horde.org/ticket/13869
------------------------------------------------------------------------------
  Ticket           | 13869
  Aktualisiert Von | piper at hrz.uni-marburg.de
  Zusammenfassung  | credentials of remote calendars from prefs not decoded
                   | correctly
  Warteschlange    | Kronolith
  Version          | 4.2.5
  Typ              | Bug
  Status           | Unconfirmed
  Priorität        | 2. Medium
  Milestone        |
  Patch            |
  Zuständige       |
+Neue Anlage      | encrypt_remote_cals.patch
------------------------------------------------------------------------------


piper at hrz.uni-marburg.de (2015-02-27 10:59) hat geschrieben:

The reason for this bug is the use of CBC-encryption on the  
credentials of the remote calendars. CBC-encryption seems to be  
session-dependant and not persistent between sessions, therefore the  
encrypted credentials of remote calendars which are stored in  
horde_prefs cannot be decrypted in a new session.

Find attached a quick-and-dirty patch which implements  
ECB-encryption-functions (as used previously) for en-/decrypting the  
credentials of remote calendars. A cleaner patch could be to hand over  
the encryption-mechanism as a parameter of the 'Horde_Secret'-method.



piper at hrz.uni-marburg.de (2015-02-27 10:59) hat hochgeladen:  
encrypt_remote_cals.patch

https://bugs.horde.org/h/services/download/?app=whups&actionID=download_file&file=encrypt_remote_cals.patch&ticket=13869&fn=%2Fencrypt_remote_cals.patch