do-community / ansible-playbooks

Playbooks for automating server procedures based on our Community guides

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

auth, nonce, salt all the same?

frame45 opened this issue · comments

I just ran this playbook on a digital ocean droplet as a test WP install. the wp-config.php file has the same hash for all of the entries. Is this a security issue? I ask because https://api.wordpress.org/secret-key/1.1/salt/ creates unique hashes for each entry. Just curious, thanks.
define( 'AUTH_KEY', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' ); define( 'SECURE_AUTH_KEY', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' ); define( 'LOGGED_IN_KEY', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' ); define( 'NONCE_KEY', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' ); define( 'AUTH_SALT', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' ); define( 'SECURE_AUTH_SALT', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' ); define( 'LOGGED_IN_SALT', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' ); define( 'NONCE_SALT', 'fa95c7b309e54ea30316c3b16db4a9f5518feae60efa5ae5ec43334773a89198' );

Hello @frame45 ! Thank you for finding this. Indeed, these should be different tokens. I will be working on this issue asap.

It is fixed in the master branch! 👍 Thanks again for surfacing the problem.

Yay, thanks, these playbooks have been very helpful for me.