[TYPO3-english] Salted Passwords & RSA: temp directory path

François Suter fsu-lists at cobweb.ch
Tue Mar 13 12:29:07 CET 2012


> But I can't set the RSA Extension's temporary path properly to store the
> temporary keys. I've created a folder above my public_html in the home
> directory (/home/username/rsaauth/) and chmodded it to 700 - but it
> stays empty. I can't find the keys in typo3temp neither.

But does the login work? Encrypted?

As far as I understand, the keys are created on the fly and exist only 
for a minimal amount of time. I've personally never "caught" a key file.

> * is the RSA Extension really needed for increased security?

Yes, it's better than SSL.

> * what form should the path in the EM Configuration dialogue have?

Any absolute path. If the login works, it means the configuration is ok.

> * any other hints to set this up for better security?

Seems ok like you did.



Francois Suter
Cobweb Development Sarl - http://www.cobweb.ch

More information about the TYPO3-english mailing list