openssl compliance issue on Mac

  • zandersmith

    (@zandersmith)


    5 years, 9 months ago

    When I try to save my SMTP credentials I get the following OpenSSL error message. Are you going to tell me that I need to recompile PHP on my Mac with another version of OpenSSL? Please don’t. 😉

    —-

    Notice: Undefined index: settings in /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/core/admin/options.php on line 24

    Warning: Invalid argument supplied for foreach() in /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/core/admin/options.php on line 24

    Fatal error: Uncaught Defuse\Crypto\Exception\EnvironmentIsBrokenException: Cipher method not supported. This is normally caused by an outdated version of OpenSSL (and/or OpenSSL compiled for FIPS compliance). Please upgrade to a newer version of OpenSSL that supports aes-256-ctr to use this library. in /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/d4psec/encryption/RuntimeTests.php:49 Stack trace: #0 /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/d4psec/encryption/Crypto.php(259): Defuse\Crypto\RuntimeTests::runtimeTest() #1 /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/d4psec/encryption/Crypto.php(39): Defuse\Crypto\Crypto::encryptInternal(‘support@persona…’, Object(Defuse\Crypto\KeyOrPassword), false) #2 /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/core/settings.php(294): Defuse\Crypto\Crypto::encrypt(‘support@persona…’, Object(Defuse\Crypto\Key)) #3 /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/core/settings.php(135 in /Library/WebServer/Documents/hpl/wp-content/plugins/gd-mail-queue/d4psec/encryption/RuntimeTests.php on line 49

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Milan Petrovic

    (@gdragon)

    5 years, 9 months ago

    The library used to encrypt passwords in the plugin uses the specific encryption method, I can’t do anything about that. Which version of PHP are you using? The plugin requires 7.0 or newer.

    In PHP for OpenSSL to work, you need to install OpenSSL library.

    Thread Starter zandersmith

    (@zandersmith)

    5 years, 9 months ago

    PHP Version 7.3.11 and OpenSSL (LibreSSL 2.8.3) is installed. It seems that LibreSSL doesn’t have FIPS encryption. Could we have a setting for another type of encryption?

    • This reply was modified 5 years, 9 months ago by zandersmith.
    Thread Starter zandersmith

    (@zandersmith)

    5 years, 9 months ago

    Here a quote from https://resources.infosecinstitute.com/libressl-the-secure-openssl-alternative

    “LibreSSL removed the FIPS compliant module from its code, arguing that the FIPS 140-2 uses weak or broken ciphers and is detrimental to security.”

    Plugin Author Milan Petrovic

    (@gdragon)

    5 years, 9 months ago

    WordPress has support for libsodium encryption library, but that is added only in WordPress 5.2 version, so it is not a real option when plugin has to support older versions of WordPress. The library I use is the best solution I could find with the widest support. And, almost no one is running a web server hosting WordPress on MacOS and this works fine on any Linux distro and in Windows.

    The best I can do is to add an option to disable this encryption use in the next version (it would have to be done via wp-config.php).

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘openssl compliance issue on Mac’ is closed to new replies.