1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00

[ci skip] Add changelog entry for #28139.

Includes a script to ease an app's upgrade.
This commit is contained in:
Kasper Timm Hansen 2017-03-02 20:11:57 +01:00
parent d22f879691
commit 6a3235b78d

View file

@ -1,3 +1,19 @@
* Improve encryption for encrypted secrets.
Switch to aes-128-gcm authenticated encryption. Also generate a random
initialization vector for each encryption so the same input and key can
generate different encrypted data.
Double the encryption key entropy by properly extracting the underlying
bytes from the hexadecimal seed key.
NOTE: Since the encryption mechanism has been switched, you need to run
this script to upgrade:
https://gist.github.com/kaspth/bc37989c2f39a5642112f28b1d93f343
*Stephen Touset*
## Rails 5.1.0.beta1 (February 23, 2017) ##
* Add encrypted secrets in `config/secrets.yml.enc`.