Problem with SMTP password encryption. Openssl version problem.

Hi everyone.

We are having problems in my company to deploy our sugar applications in a new VM environment.

The thing is that sugar use the openssl_encrypt with the algo "bf-ecb". But blowfish has been deprecated by openssl in version 3.0.1. We are using version 3.0.2 and it works but in version 3.0.14 isn't working.

Any way the Blowfish::encode() function is returning false for us in this machine.

Some body can tell me which is the proper openssl version to use.

Thanks in advance.

0 Shawn Smith 2 months ago

Hello Raul - I believe this is the result of issue 90068 | blowfish encryption cipher in newer platforms (i.e. LDAP / Email Passwords). I've attached a guide to working around this problem. Hopefully this will help.
openssl-legacy-guide.zip

Thanks,
Shawn
Cancel
Vote Up +2 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Raul Bethencourt Gonzalez 2 months ago in reply to Shawn Smith

Hello Shawn Smith

Thanks for the infos. I'm gonna try that and ill come back with an answer.

Regards,
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Raul Bethencourt Gonzalez 1 month ago in reply to Raul Bethencourt Gonzalez

Hello Shawn Smith

Thanks for the tips. Doing Openssl configuration and restarting the PHP machine do the trick.

Regards,
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Cancel