From 4f96d8f832d5db64ccb61d97e7f1e3a2e0fd4eb9 Mon Sep 17 00:00:00 2001 From: Go MAEDA Date: Mon, 17 Dec 2018 04:49:08 +0000 Subject: Decrypting LDAP and SCM passwords fail if the plaintext password is longer than 31 bytes (#30171). Patch by Nik Il. git-svn-id: http://svn.redmine.org/redmine/trunk@17763 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- lib/redmine/ciphering.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/redmine/ciphering.rb b/lib/redmine/ciphering.rb index 61f309b40..ad30e035f 100644 --- a/lib/redmine/ciphering.rb +++ b/lib/redmine/ciphering.rb @@ -33,7 +33,7 @@ module Redmine c.iv = iv e = c.update(text.to_s) e << c.final - "aes-256-cbc:" + [e, iv].map {|v| Base64.encode64(v).strip}.join('--') + "aes-256-cbc:" + [e, iv].map {|v| Base64.strict_encode64(v)}.join('--') end end -- cgit v1.2.3