Lockbox::Error (Master key must be 32 bytes (64 hex digits)) about passwordpusher HOT 5 CLOSED

Hello @TheGroundZero, thanks for contributing to the Password Pusher community! We will respond as soon as possible.

from passwordpusher.

At first glance I have no idea. All looks good. Even running locally with that secret value works:

docker run -p "5100:5100" --name pwpush --env PWPUSH_MASTER_KEY=2460873c513c44d596b07d0c190c760d9e4c1e4777125d1728c5282c87d2d6ad pglombardo/pwpush:release

Let me give it some thought.

from passwordpusher.

Could there be an extra newline in the secret? Could you try assuring that there is no new line in /srv/service/secret/pwpush?

from passwordpusher.

Aha, that may be it!

The file was made by just opening it in nano and copy/pasting from the browser.
Nano does tend to add a newline add the end of a file.

$ cat pwpush
2460873c513c44d596b07d0c190c760d9e4c1e4777125d1728c5282c87d2d6ad

$ hexdump pwpush
0000000 3432 3036 3738 6333 3135 6333 3434 3564
0000010 3639 3062 6437 6330 3931 6330 3637 6430
0000020 6539 6334 6531 3734 3737 3231 6435 3731
0000030 3832 3563 3832 6332 3738 3264 3664 6461
0000040 000a
0000041

$ wc -c pwpush
65 pwpush

Cyberchef

To fix it:

$ echo -n "2460873c513c44d596b07d0c190c760d9e4c1e4777125d1728c5282c87d2d6ad" > pwpush

$ wc -c pwpush
64 pwpush

Maybe it's not a bad idea to do a .strip of the string before using it?

from passwordpusher.

Excellent - that is great to hear.

Maybe it's not a bad idea to do a .strip of the string before using it?

I agree but this environment variable is actually processed by a 3rd party gem. I'll think about filing a fix request there.

I'll close this issue out but if anything remains - let me know.

from passwordpusher.