in reply to decryption problem

Assuming (naively, perhaps!) that the error actually is reporting the problem accurately, and just from general principles, you wouldn't think that a client could modify your hard-coded salt value.

Did you check for some other instance of salt where it's a variable supplied by the client?

I noticed in the module docs that the salt option has something to do with OpenSSL. Could your OpenSSL version have changed in the server switch?

Can you work up a complete broken example?

non-Perl: Andy Ford

Replies are listed 'Best First'.
Re^2: decryption problem
by Anonymous Monk on Aug 31, 2007 at 15:12 UTC
    Yes, the OpenSSL version may have changed.

    Should I require everyone to change their password, so that it will update the 'salt'? I don't know how it stores the salt, maybe as part of the encrypted string, but I don't know enough about it.

    I will see if I can find out the version differences.

    Now what about data I cannot access at all, because of the salt problem? Is it just lost without hope?

    Thank again!
    Rick
[reply]
      What about installing the old server's version of OpenSSL? Sorry I'm not much help, I've never used encryption directly like this, I'm just helping you guess.

      non-Perl: Andy Ford

[reply]

In Section Seekers of Perl Wisdom