Skip to content

Commit 656f8b6

Browse files
committed
auto update 'password_pbkdf2_default_rounds' "
If the current value for password_pbkdf2_default_rounds is the old default value of 10000, updateconfig will use the new default value when writing the new config. If the curreny value for password_pbkdf2_default_rounds is less than the new default the user will be told to update the value. New translation strings added. Updates to upgrading.txt doc.
1 parent 861ef19 commit 656f8b6

File tree

14 files changed

+2566
-2339
lines changed

14 files changed

+2566
-2339
lines changed

doc/upgrading.txt

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,9 @@ You can then merge any local comments from the tracker's
6666
``config.ini`` to ``newconfig.ini`` and replace
6767
``config.ini`` with ``newconfig.ini``.
6868

69+
``updateconfig`` will tell you if it is changing old default
70+
values or if a value must be changed manually.
71+
6972
Using the roundup-mailgw script (required)
7073
------------------------------------------
7174

@@ -191,6 +194,11 @@ This release of Roundup changes the value to 2000000 (2
191194
million). This exceeds the current `recommended setting of
192195
1,300,000`_ for PBKDF2 when used with SHA1.
193196

197+
If you were using the old 10000 value, it will be automatically
198+
upgraded to 2 million by using ``roundup-admin``'s
199+
``updateconfig``. If you were not using the old 10000 default,
200+
you should update it manually.
201+
194202
After the change users will still be able to log in using the
195203
older 10000 round hashed passwords. If ``migrate_passwords`` is
196204
set to ``yes``, passwords will be automatically re-hashed using

0 commit comments

Comments
 (0)