Page MenuHomeDevCentral

Get rid of mcrypt reference in config/app.php
Closed, ResolvedPublic

Description

Pre-5.1 config/app.php contains:
'cipher' => MCRYPT_RIJNDAEL_128,

Debian servers don't install mcrypt by default, our Docker image does.

Now Laravel starter template offers another cipher and to get rid of a default value for APP_KEY:

config/app.php
/*
|--------------------------------------------------------------------------
| Encryption Key
|--------------------------------------------------------------------------
|
| This key is used by the Illuminate encrypter service and should be set
| to a random, 32 character string, otherwise these encrypted strings
| will not be safe. Please do this before deploying an application!
|
*/

'key' => env('APP_KEY'),

'cipher' => 'AES-256-CBC',

Event Timeline

I wonder if it's not a matter of not have documented his change in upgrade guide: https://github.com/laravel/framework/pull/9041/files

We should investigate but they don't use MCRYPT_RIJNDAEL_128 anymore in 5.1+.

dereckson renamed this task from Composer: composer.json must contain mcrypt as dependency to Get rid of mcrypt reference in config/app.php.Jul 1 2016, 19:54
dereckson updated the task description. (Show Details)