Several issues found in 3.0.7 #3713
Replies: 5 comments
-
Fix for item 2 includes/config/include.php
72,74
> if (!defined('SECUREFILE')) {
> define('SECUREFILE', 'teampass-seckey.txt');
> } includes/config/settings.php
26,28
> if (!defined('SECUREFILE')) {
> define('SECUREFILE', 'teampass-seckey.txt');
> } |
Beta Was this translation helpful? Give feedback.
-
Fix for item 3 sources/identify.php
1227c1227
< LDAP_OPT_X_TLS_REQUIRE_CERT => LDAP_OPT_X_TLS_HARD,
---
> LDAP_OPT_X_TLS_REQUIRE_CERT => (isset($SETTINGS['ldap_tls_certiface_check']) ? $SETTINGS['ldap_tls_certiface_check'] : LDAP_OPT_X_TLS_HARD), sources/users.queries.php
2545c2545
< LDAP_OPT_X_TLS_REQUIRE_CERT => LDAP_OPT_X_TLS_HARD
---
> LDAP_OPT_X_TLS_REQUIRE_CERT => (isset($SETTINGS['ldap_tls_certiface_check']) ? $SETTINGS['ldap_tls_certiface_check'] : LDAP_OPT_X_TLS_HARD) |
Beta Was this translation helpful? Give feedback.
-
Fix for item 4 sources/main.functions.php
1882c1882
< $attribute = is_null($raison) === true ? '' : explode(' : ', $raison);
---
> $attribute = is_null($raison) === true ? Array('') : explode(' : ', $raison); |
Beta Was this translation helpful? Give feedback.
-
I am at a loss for item 5. Everything is populated and looks accurate (from what I can tell) until it tries to decrypt the private_key stored in the DB. return base64_encode((string) $cipher->decrypt(base64_decode($userPrivateKey))); is the offending line of code. It is called by 'private_key_clear' => decryptPrivateKey($passwordClear, $userInfo['private_key']), which is called by $returnKeys = prepareUserEncryptionKeys($userInfo, $passwordClear) Both $userInfo and $passwordClear are populated and accurate when this function call executes. I've followed it all the way down to includes/libraries/Encryption/phpseclib/Crypt/Base.php and everything looks fine until it tries to return the decrypted plain text, which is empty. My only guess is that there is a mismatch between how something is encrypted/hashed as stored and how the current library is trying to decrypt. I've generated new keys for the user I'm working with, but that changed nothing. |
Beta Was this translation helpful? Give feedback.
-
Should be fixed. Please close |
Beta Was this translation helpful? Give feedback.
-
I'm still trying to work through all of the errors we are receiving and issues we're having after upgrading to 3.x from 2.x (There's a lot.
Because there's several I didn't want to create an issue for each one, but will post them here to be reviewed and someone else can determine if my findings are worth being turned into issues.
Beta Was this translation helpful? Give feedback.
All reactions