From d8ea03f1e9eb341643ccff4e77a38415fe9289c1 Mon Sep 17 00:00:00 2001 From: apparition Date: Thu, 1 Feb 2018 13:38:17 +0900 Subject: [PATCH] Explicitly specify MD mode to account for defaults between LibreSSL and OpenSSL --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index d6aeb50..0b0ad01 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,7 @@ export FOO=secret export BAR=alsosecret ``` -If they are encrypted with `openssl aes-256-cbc -e -in secret-env-plain -out secret-env-cipher -k $KEY`, and `$KEY` is set +If they are encrypted with `openssl aes-256-cbc -e -md sha256 -in secret-env-plain -out secret-env-cipher -k $KEY`, and `$KEY` is set in the CircleCI project, the variables in `secret-env-plain` will be available in the build. -You could use the same process but replace the `openssl` command in `circle.yml` with `openssl aes-256-cbc -d -in secret-file-cipher -out secret-file-plain -k $KEY` to create plaintext files in the build environment instead of just exporting environment variables. +You could use the same process but replace the `openssl` command in `circle.yml` with `openssl aes-256-cbc -d -md sha256 -in secret-file-cipher -out secret-file-plain -k $KEY` to create plaintext files in the build environment instead of just exporting environment variables.