* If we are going to allow bcrypt routines to silently fail and

return zero-length password in Vend::UserDB, we should put a Require in any catalog that forces bcrypt.
interchange · Feb 2, 2017 · f7e2d72 · f7e2d72
1 parent 8397531
commit f7e2d72
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/dist/strap/catalog.cfg b/dist/strap/catalog.cfg
@@ -31,6 +31,8 @@ VariableDatabase site
 # Warn if any important modules or usertags are missing.
 
 Require module Digest::MD5    "Need %s %s for better cache keys."
+Require module Digest::Bcrypt "Required if you are going to use bcrypt passwords for UserDB."
+Require module Crypt::Random  "Required if you are going to use bcrypt passwords for UserDB."
 Require module Safe::Hole     "Need %s %s for embedded perl object access."
 
 # Encoding