tobias/friendica
1
0
Fork 0
Code Pull requests Activity

Fix php-encryption version 2 compatibility issues

Browse source
This commit is contained in:
Hypolite Petovan 2017-11-09 02:35:11 -05:00
parent b4ce07bdc5
commit d5aff9ac31
2 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
mod/dfrn_notify.php
View file

@ -183,7 +183,8 @@ function dfrn_notify_post(App $a) {
break;
case 2:
try {
$data = \Defuse\Crypto\Crypto::decrypt(hex2bin($data), $final_key);
$FinalKey = \Defuse\Crypto\Key::loadFromAsciiSafeString($final_key);
$data = \Defuse\Crypto\Crypto::decrypt(hex2bin($data), $FinalKey);
} catch (\Defuse\Crypto\Exception\WrongKeyOrModifiedCiphertextException $ex) { // VERY IMPORTANT
/*
* Either:

5
src/Protocol/DFRN.php
View file

@ -1296,13 +1296,14 @@ class DFRN
case 2:
// RINO 2 based on php-encryption
try {
$key = \Defuse\Crypto\Key::createNewRandomKey();
$KeyObject = \Defuse\Crypto\Key::createNewRandomKey();
} catch (\Defuse\Crypto\Exception\CryptoException $ex) {
logger('Cannot safely create a key');
return -4;
}
try {
$data = \Defuse\Crypto\Crypto::encrypt($postvars['data'], $key);
$data = \Defuse\Crypto\Crypto::encrypt($postvars['data'], $KeyObject);
$key = $KeyObject->saveToAsciiSafeString();
} catch (\Defuse\Crypto\Exception\CryptoException $ex) {
logger('Cannot safely perform encryption');
return -6;