comparison doc/upgrading.txt @ 7203:12a3cd86668f

auto update 'password_pbkdf2_default_rounds' " If the current value for password_pbkdf2_default_rounds is the old default value of 10000, updateconfig will use the new default value when writing the new config. If the curreny value for password_pbkdf2_default_rounds is less than the new default the user will be told to update the value. New translation strings added. Updates to upgrading.txt doc.
author John Rouillard <rouilj@ieee.org>
date Wed, 01 Mar 2023 10:51:37 -0500
parents 1549c7e74ef8
children c1227f883177
comparison
equal deleted inserted replaced
7202:b222658a3504 7203:12a3cd86668f
64 to generate a new ini file preserving all your settings. 64 to generate a new ini file preserving all your settings.
65 You can then merge any local comments from the tracker's 65 You can then merge any local comments from the tracker's
66 ``config.ini`` to ``newconfig.ini`` and replace 66 ``config.ini`` to ``newconfig.ini`` and replace
67 ``config.ini`` with ``newconfig.ini``. 67 ``config.ini`` with ``newconfig.ini``.
68 68
69 ``updateconfig`` will tell you if it is changing old default
70 values or if a value must be changed manually.
71
69 Using the roundup-mailgw script (required) 72 Using the roundup-mailgw script (required)
70 ------------------------------------------ 73 ------------------------------------------
71 74
72 In previous versions the roundup-mailgw script had a ``-C`` (or 75 In previous versions the roundup-mailgw script had a ``-C`` (or
73 ``--class``) option for specifying a class to be used with ``-S`` (or 76 ``--class``) option for specifying a class to be used with ``-S`` (or
188 updated for advancements in computing power. 191 updated for advancements in computing power.
189 192
190 This release of Roundup changes the value to 2000000 (2 193 This release of Roundup changes the value to 2000000 (2
191 million). This exceeds the current `recommended setting of 194 million). This exceeds the current `recommended setting of
192 1,300,000`_ for PBKDF2 when used with SHA1. 195 1,300,000`_ for PBKDF2 when used with SHA1.
196
197 If you were using the old 10000 value, it will be automatically
198 upgraded to 2 million by using ``roundup-admin``'s
199 ``updateconfig``. If you were not using the old 10000 default,
200 you should update it manually.
193 201
194 After the change users will still be able to log in using the 202 After the change users will still be able to log in using the
195 older 10000 round hashed passwords. If ``migrate_passwords`` is 203 older 10000 round hashed passwords. If ``migrate_passwords`` is
196 set to ``yes``, passwords will be automatically re-hashed using 204 set to ``yes``, passwords will be automatically re-hashed using
197 the new higher value when the user logs in. 205 the new higher value when the user logs in.

Roundup Issue Tracker: http://roundup-tracker.org/