fix email token encryption/decryption hubzero-mailgateway compatability

hubzero · Aug 7, 2024 · f66344c · f66344c
1 parent 1ade1c5
commit f66344c
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/core/libraries/Hubzero/Mail/Token.php b/core/libraries/Hubzero/Mail/Token.php
@@ -138,10 +138,10 @@ public function buildEmailToken($version, $action, $userid, $id)
 		$binaryString .= str_repeat(chr($pad), $pad);
 
 		// Do the encryption
-		$encrypted = openssl_encrypt($binaryString, 'AES-256-CBC', $this->_key, OPENSSL_RAW_DATA , $this->_iv);
+		$encrypted = openssl_encrypt($binaryString, 'AES-128-CBC', $this->_key, OPENSSL_RAW_DATA , $this->_iv);
 
 		// Prepend an unencrypted version byte and action byte (in base16)
-		$rv = bin2hex(pack("C", $version)) . bin2hex(pack("C", $action)) .  bin2hex($encrypted);
+		$rv = substr(bin2hex(pack("C", $version)) . bin2hex(pack("C", $action)) .  bin2hex($encrypted),0,36);
 
 		return $rv;
 	}
@@ -165,7 +165,7 @@ public function decryptEmailToken($t)
 		$encrypted = hex2bin($rawtoken);
 
 		// Do the decryption
-		$decrypted = openssl_decrypt($encrypted, 'AES-256-CBC', $this->_key, OPENSSL_RAW_DATA | OPENSSL_ZERO_PADDING, $this->_iv);
+		$decrypted = openssl_decrypt($encrypted, 'AES-128-CBC', $this->_key, OPENSSL_RAW_DATA | OPENSSL_ZERO_PADDING, $this->_iv);
 
 		// unpack the original values, no need to strip padding or hash
 		// we'll just unpack what we need