Bug 40349 - Use pbkdf instead of the default openssl1 for Crypt::CBC
Summary: Use pbkdf instead of the default openssl1 for Crypt::CBC
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Architecture, internals, and plumbing (show other bugs)
Version: unspecified
Hardware: All All
: P5 - low enhancement
Assignee: David Cook
QA Contact: Testopia
URL:
Keywords:
Depends on: 40348
Blocks:
  Show dependency treegraph
 
Reported: 2025-07-11 12:35 UTC by Jonathan Druart
Modified: 2025-07-12 10:09 UTC (History)
1 user (show)

See Also:
GIT URL:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jonathan Druart 2025-07-11 12:35:56 UTC
02:28:36 koha_1       | WARNING: The key derivation method "opensslv1" is deprecated. Using -pbkdf=>'pbkdf2' would be better.
02:28:36 koha_1       | Pass -nodeprecate=>1 to inhibit this message.
02:28:36 koha_1       |  at /kohadevbox/koha/Koha/Patron.pm line 3216.

From the doc
https://metacpan.org/pod/Crypt::CBC

-pbkdf         The passphrase-based key derivation function used to derive
                  the encryption key and initialization vector from the
                  provided passphrase. For backward compatibility, Crypt::CBC
                  will default to "opensslv1", but it is recommended to use
                  the standard "pbkdf2"algorithm instead. If you wish to interoperate
                  with OpenSSL, be aware that different versions of the software
                  support a series of derivation functions.