Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

DietPi-Software | Store global password with enhanced security #2625

Merged
merged 6 commits into from
Mar 9, 2019
Merged

DietPi-Software | Store global password with enhanced security #2625

merged 6 commits into from
Mar 9, 2019

Conversation

MichaIng
Copy link
Owner

@MichaIng MichaIng commented Mar 9, 2019 •
edited
Loading

Status: Ready

  • DietPi-Software
  • DietPi-Set_software
  • DietPi-Patch
  • Changelog

Testing:

  • VM Jessie
  • VM Stretch
  • VM Buster

Reference: #2213

Commit list/description:

  • DietPi-Pre-patch | Safe global DietPi-Software password with salt to enhance security; On Buster use new "pbkdf2" function with 10000 iterations to resolve a warning about deprecated key derivation used.
    • This needs to be done during pre-patches to assure DietPi-Software can decrypt with new method during DietPi-Patch reinstalls.
  • DietPi-Software | Global password is now saved with salt to enhance security; On Buster use new "pbkdf2" function is used with 10000 iterations to resolve a warning about deprecated key derivation used.
  • DietPi-Set_software | Store global DietPi-Software password with salt to enhance security; On Buster use new "pbkdf2" function with 10000 iterations to resolve warnings about deprecated key derivation used.
  • DietPi-Set_software | Minor coding: No reason to unset local variables at end of function
  • DietPi-Patch | Store global DietPi-Software password with salt to enhance security; On Buster use new "pbkdf2" function with 10000 iterations to resolve warnings about deprecated key derivation used.

@MichaIng
v6.22
e9c8c97 
+ DietPi-Pre-patch | Safe global DietPi-Software password with salt to enhance security; On Buster use new "pbkdf2" function with 10000 iterations to resolve a warning about deprecated key derivation used.
@MichaIng MichaIng added this to the v6.22 milestone Mar 9, 2019
@MichaIng MichaIng self-assigned this Mar 9, 2019
@MichaIng MichaIng mentioned this pull request Mar 9, 2019
Closed
MichaIng added 5 commits March 9, 2019 19:01
@MichaIng
v6.22
4e0738a 
+ DietPi-Software | Global password is now saved with salt to enhance security; On Buster use new "pbkdf2" function is used with 10000 iterations to resolve a warning about deprecated key derivation used.
@MichaIng
v6.22
fc591f5 
+ DietPi-Set_software | Store global DietPi-Software password with salt to enhance security; On Buster use new "pbkdf2" function with 10000 iterations to resolve warnings about deprecated key derivation used.
+ DietPi-Set_software | Minor coding: No reason to unset local variables at end of function
@MichaIng
v6.22
b87b7f8 
+ DietPi-Pre-patch | Minor wording
@MichaIng
v6.22
6242a95 
+ DietPi-Patch | Store global DietPi-Software password with salt to enhance security; On Buster use new "pbkdf2" function with 10000 iterations to resolve warnings about deprecated key derivation used.
@MichaIng
v6.22
ba7e0a2 
+ CHANGELOG | The DietPi-Software global password is now stored with enhanced security
@MichaIng MichaIng merged commit 75d8dec into dev Mar 9, 2019
@MichaIng MichaIng deleted the openssl branch March 9, 2019 19:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@MichaIng MichaIng

Labels
Buster Security 🔒
Projects
None yet
Milestone
v6.22
Development

Successfully merging this pull request may close these issues.
1 participant
@MichaIng