* Add generation of BCrypt pepper to makecat operation.

interchange · Nov 17, 2015 · 65a86af · 65a86af
1 parent f1de50e
commit 65a86af
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/dist/strap/catalog.cfg b/dist/strap/catalog.cfg
@@ -265,7 +265,7 @@ UserDB    default    from_plain    1
 # The pepper should be unique for your site, but note that if you change this,
 # it will make previously-crypted passwords inaccessible --
 # so set this before you start adding users, or don't set at all.
-#UserDB    default    bcrypt_pepper  CHANGE_ME_255370299252265
+UserDB    default    bcrypt_pepper  __BCRYPT_PEPPER__
 
 # Set to 1 to make the username and password case-insensitive
 UserDB    default    ignore_case   1

diff --git a/dist/strap/config/makedirs b/dist/strap/config/makedirs
@@ -90,6 +90,10 @@ fi
 chmod $FMODE __MVC_RELOCATE__$LOGDIR/logs/error.log
 chmod $FMODE __MVC_RELOCATE____MVC_CATROOT__/catalog.cfg
 
+
+## Create Bcrypt Pepper
+perl -e '@c=("A".."Z","a".."z",0..9);$p.=$c[rand(scalar @c)] for 1..32; print $p' > __MVC_RELOCATE____MVC_CATROOT__/variables/BCRYPT_PEPPER
+
 # Make cache directories to store tmps.
 if test -n '__MVC_CACHEDIR__'
 then