https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41774

--- Comment #1 from Kyle M Hall (khall) <[email protected]> ---
Created attachment 192496
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=192496&action=edit
Bug 41774: Add ability to read encryption key from environment variable

From a security standpoint it would be useful to be able to store Koha's
encryption key in an environment variable. This is particularly useful in
containerized environments, but is not limited to that use case.

Test plan:
1) Apply this patch
2) Remove or comment out the encryption key in koha-conf.xml
3) Restart plack
4) Browse to the "System information" tab of the about page
5) Note the missing encryption_key warning on the page
6) restart plack again, inject the encryption key as an environment variable:
   sudo KOHA_ENCRYPTION_KEY=t0P_secret koha-plack --restart kohadev
7) Reload the about page
8) Note the warning is gone!

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to