search

LinkStackOrg / LinkStack

LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
https://linkstack.org
GNU Affero General Public License v3.0
2.09k stars 215 forks source link

Unsupported cipher or incorrect key length. Supported ciphers are: aes-128-cbc, aes-256-cbc, aes-128-gcm, aes-256-gcm #724

Open hugofant opened 4 months ago

hugofant commented 4 months ago

LinkStack version

4.7.6

Description

have brought the code to my website. error appears on first call of the url. all the mentioned extension here are active... would be thankful for any ideas/solutions

Details about your system

PHP 8.2

How to reproduce

url: https://ls.ryps.eu/

Possible Solution

No response

Additional Context

No response

hugofant commented 4 months ago

additional info: SSL seems to work, PHP Infos: https://ls.ryps.eu/test.php

hugofant commented 4 months ago

variable "app_key" in the .env file looked completely weird (some characters replaced with "xxxx"): APP_KEY=base64:xxxxxxxxxxxxxxxxxxxdONK8iRb/AEPCnmeQENvxEY=base64:xxxxxxxxxxxxxxxxxxxx+M3BmYQ/2kjsInFCIIKAzVA= deleting the second part starting with "=base64.." resulted in showing the setup page

lastsamurai26 commented 4 months ago

variable "app_key" in the .env file looked completely weird (some characters replaced with "xxxx"): APP_KEY=base64:xxxxxxxxxxxxxxxxxxxdONK8iRb/AEPCnmeQENvxEY=base64:xxxxxxxxxxxxxxxxxxxx+M3BmYQ/2kjsInFCIIKAzVA= deleting the second part starting with "=base64.." resulted in showing the setup page

the APP_KEY= value need to be shown like this ;) this is ok

You installed Linkstack native without docker on your own webserver ?

hugofant commented 4 months ago

the APP_KEY= value need to be shown like this ;) this is ok

...don't think so, worked only after modifying it as described

You installed Linkstack native without docker on your own webserver ?

correct, i've downloaded the zip, extracted and transfered to my webserver

lastsamurai26 commented 4 months ago

...don't think so, worked only after modifying it as described

An APP_key is generated the first time the website is accessed and entered here. Quote This key is used by the Illuminate encryption service and should be set to a random string. should be set to a random 32-character string, otherwise the encrypted strings will not be secure. will not be secure. Please do this before you deploy an application! End quote

correct, i've downloaded the zip, extracted and transfered to my webserver

What do the web server logs say? if I have seen this correctly you are using LiteSpeed Webserver, maybe it has some settings regarding ciphers

hugofant commented 4 months ago

base64:xxxxxxxxxxxxxxxxxxxdONK8iRb/AEPCnmeQENvxEY=base64:xxxxxxxxxxxxxxxxxxxx+M3BmYQ/2kjsInFCIIKAzVA=

i understand, but it seems that there was a problem generating the key - it's longer than 32 chars and there seem to be two keys concatenated in one field.

Please do this before you deploy an application!

that's what i've done, I've shrunk the value to 32 chars

What do the web server logs say?

as it's hosted by a provider, i've no access to the server logs

lastsamurai26 commented 4 months ago

i understand, but it seems that there was a problem generating the key - it's longer than 32 chars and there seem to be two keys concatenated in one field.

Please do this before you deploy an application!

that's what i've done, I've shrunk the value to 32 chars

Ok that is indeed strange that should not normally happen, I will test and check this