From db3763aa836fb1d15efa7970bfea47da76cf3e3d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lo=C3=AFc=20Guitaut?= Date: Wed, 9 Sep 2015 23:39:29 +0200 Subject: [PATCH] Use openssl rand to generate password It should be more secure than hashing the current time. --- commands | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/commands b/commands index df864b3..7f3a261 100755 --- a/commands +++ b/commands @@ -26,7 +26,7 @@ case "$1" in fi mkdir -p "$SERVICE_ROOT" || dokku_log_fail "Unable to create service directory" - password=$(date +%s | sha256sum | base64 | head -c 16) + password=$(openssl rand -hex 16) echo "$password" > "$SERVICE_ROOT/PASSWORD" touch "$LINKS_FILE"