Values of VPN_USER and VPN_PASS shows up in log as cleartext

binhex / arch-delugevpn

Docker build script for Arch Linux base with Deluge, Privoxy and OpenVPN

GNU General Public License v3.0

695 stars 112 forks source link

Open spirkaa opened 2 years ago

spirkaa commented 2 years ago

Values of VPN_USER and VPN_PASS shows up in log as cleartext. Maybe move them to debug log level or wipe out completely?

[info] VPN_USER defined as 'RealUsername' [info] VPN_PASS defined as 'PasswordRealToo123'

krizzo commented 2 years ago

This is in the base vpn container. I created an issue on that repo and a PR for patching. https://github.com/binhex/arch-int-vpn/issues/31