From 9155ebf6ca09023a79d1ca9450df935a057d761d Mon Sep 17 00:00:00 2001 From: Luiz Gustavo Nogara Date: Thu, 10 Jul 2025 12:44:04 -0300 Subject: [PATCH 1/2] Update backup.sh Use PBKDF2 key derivation Avoids the error: ``` *** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better. ``` --- backup.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backup.sh b/backup.sh index 8fd1932..fcc72ca 100644 --- a/backup.sh +++ b/backup.sh @@ -82,7 +82,7 @@ fi if [ "${ENCRYPTION_PASSWORD}" != "**None**" ]; then >&2 echo "Encrypting ${SRC_FILE}" - openssl enc -aes-256-cbc -in $SRC_FILE -out ${SRC_FILE}.enc -k $ENCRYPTION_PASSWORD + openssl enc -aes-256-cbc -pbkdf2 -iter 100000 -salt -in "$SRC_FILE" -out "${SRC_FILE}.enc" -k "$ENCRYPTION_PASSWORD" if [ $? != 0 ]; then >&2 echo "Error encrypting ${SRC_FILE}" fi From 12eaee3deb846d4462ed133150a9e5c023a10ab7 Mon Sep 17 00:00:00 2001 From: Luiz Gustavo Nogara Date: Thu, 10 Jul 2025 12:45:26 -0300 Subject: [PATCH 2/2] Update restore.sh --- restore.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/restore.sh b/restore.sh index 3f58816..ebbff9b 100755 --- a/restore.sh +++ b/restore.sh @@ -94,7 +94,7 @@ if [[ "$LOCAL_FILE" == *.enc ]]; then echo "Decrypting backup file" DECRYPTED_PATH="${DOWNLOAD_PATH%.enc}" - openssl enc -aes-256-cbc -d -in $DOWNLOAD_PATH -out $DECRYPTED_PATH -k $ENCRYPTION_PASSWORD + openssl enc -aes-256-cbc -d -pbkdf2 -in "$DOWNLOAD_PATH" -out "$DECRYPTED_PATH" -k "$ENCRYPTION_PASSWORD" if [ $? != 0 ]; then echo "Error decrypting backup file. Check your encryption password." exit 1