Bug 40349

Summary: Use pbkdf instead of the default openssl1 for Crypt::CBC
Product: Koha Reporter: Jonathan Druart <jonathan.druart>
Component: Architecture, internals, and plumbingAssignee: David Cook <dcook>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low CC: martin.renvoize
Version: unspecified   
Hardware: All   
OS: All   
GIT URL: Change sponsored?: ---
Patch complexity: --- Documentation contact:
Documentation submission: Text to go in the release notes:
Version(s) released in:
Circulation function:
Bug Depends on: 40348    
Bug Blocks:    

Description Jonathan Druart 2025-07-11 12:35:56 UTC
02:28:36 koha_1       | WARNING: The key derivation method "opensslv1" is deprecated. Using -pbkdf=>'pbkdf2' would be better.
02:28:36 koha_1       | Pass -nodeprecate=>1 to inhibit this message.
02:28:36 koha_1       |  at /kohadevbox/koha/Koha/Patron.pm line 3216.

From the doc
https://metacpan.org/pod/Crypt::CBC

-pbkdf         The passphrase-based key derivation function used to derive
                  the encryption key and initialization vector from the
                  provided passphrase. For backward compatibility, Crypt::CBC
                  will default to "opensslv1", but it is recommended to use
                  the standard "pbkdf2"algorithm instead. If you wish to interoperate
                  with OpenSSL, be aware that different versions of the software
                  support a series of derivation functions.