Merge pull request #128 from totten/1.x-master-rand37

drush install - Bump up entropy for autogenerated creds. Add signing key.
civicrm · May 21, 2021 · 808c08c · 808c08c
2 parents 65e1214 + ad137c4
commit 808c08c
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/drush/civicrm.drush.inc b/drush/civicrm.drush.inc
@@ -508,8 +508,9 @@ function _civicrm_generate_settings_file($dbuser, $dbpass, $dbhost, $dbname, $mo
     'CMSdbPass' => $db_spec['password'],
     'CMSdbHost' => $db_spec['host'],
     'CMSdbName' => $db_spec['database'],
-    'siteKey' => preg_replace(';[^a-zA-Z0-9];', '', base64_encode(random_bytes(32))),
-    'credKeys' => 'aes-cbc:hkdf-sha256:' . preg_replace(';[^a-zA-Z0-9];', '', base64_encode(random_bytes(32))),
+    'siteKey' => preg_replace(';[^a-zA-Z0-9];', '', base64_encode(random_bytes(37))),
+    'credKeys' => 'aes-cbc:hkdf-sha256:' . preg_replace(';[^a-zA-Z0-9];', '', base64_encode(random_bytes(37))),
+    'signKeys' => 'jwt-hs256:hkdf-sha256:' . preg_replace(';[^a-zA-Z0-9];', '', base64_encode(random_bytes(37))),
   );
   $str = file_get_contents($settingsTplFile);
   foreach ($params as $key => $value) {