Manual:$wgSessionInsecureSecrets
 | この機能は、バージョン 1.43.0 で完全に除去されました。 |
| セキュリティ: $wgSessionInsecureSecrets | |
|---|---|
| Allows MediaWiki to work at the cost of storing sensitive session data insecurely. |
|
| 導入されたバージョン: | 1.27.0 (Gerrit change 285438; git #0b8b539a) |
| 除去されたバージョン: | 1.43.0 (Gerrit change 1027531; git #e4127e58) |
| 許容される値: | (真偽値) |
| 既定値: | false |
| その他の設定: アルファベット順 | 機能順 | |
詳細
$wgSessionInsecureSecrets を有効にすることはお勧めできません! Note that it is the best solution to install the OpenSSL extension.MediaWiki will not work out of the box if the PHP openssl extension is not available on the server. If for some reason you cannot install one of these extensions, you can set $wgSessionInsecureSecrets to "true" to make MediaWiki work again. This comes at the cost of storing sensitive session data insecurely.
If one of the two extensions is installed, $wgSessionInsecureSecrets is not set, but none of the cipher algorithms, which MediaWiki supports, is available in that extension, you will get this error message:
Warning: openssl_encrypt(): Unknown cipher algorithm in /wiki/includes/session/Session.php on line 424
This can be fixed like so: In order for OpenSSL to be able to work correctly, you will need one of these cipher algorithm: aes-256-ctr or aes-256-cbc. If you are using mcrypt, it needs to support the rijndael-128 algorithm and either ctr or cbc mode.