stupidpupil
*** WARNING : deprecated key derivation used
Current script returns:
*** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better.
Why not using openssl defaults? Ending up with:
decrypted_keyfile=$(echo "$encrypted_keyfile" | openssl enc -base64 -d -salt -k "$openssl_passphrase")
One problem is that the defaults can change (and indeed have done #1 ), so you either to store the parameters somewhere or hardcode them, AFAICT.
I wonder if the deprecation warning actually relates to using "-k" instead of "-pass pass:"; I'll check this.
One problem is that the defaults can change (and indeed have done #1 ), so you either to store the parameters somewhere or hardcode them, AFAICT.
It would be nice if there would be a simple configuration file for https-keyscript.
btw, this issue could be fixed by https://github.com/stupidpupil/https-keyscript/pull/11
