search

instructure / canvas-lms

The open LMS by Instructure, Inc.
https://github.com/instructure/canvas-lms/wiki
GNU Affero General Public License v3.0
5.4k stars 2.42k forks source link

Update default LTI keys #2361

Open nwalters512 opened 3 weeks ago

nwalters512 commented 3 weeks ago

The default keys used a short key length and outdated algorithm, which made them incompatible with newer LTI tools.

I also updated the instructions for generating new keys; the old instructions don't work (see #1861). I copied the call from here:

https://github.com/instructure/canvas-lms/blob/fbe666acc0eebabb52c11f9c83c3d8d0134ff2d6/gems/canvas_security/lib/canvas_security/key_storage.rb#L34-L36

Closes #1861.

CLAassistant commented 3 weeks ago

CLA assistant check
All committers have signed the CLA.