Compile PHP 7.2 with Argon2
Argon2 is a new feature of PHP 7.2 as stated here: http://php.net/releases/7_2_0.php. It won the password hashing competition and is the recommended hashing algorithm.
It must be enabled my re-compiling PHP 7.2 with --with-password-argon2
.
PHP shipped with Plesk supports Argon2 since Plesk 18.0.28 version – https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18028
—
IG
-
Martin Ajtnik commented
+1
-
Anonymous commented
Also the latest versions 7.4.8, 7.3.20 and 7.2.32 do NOT support argon2.
Is that so hard to include?
-
Pat commented
I can confirm that PHP 7.3.19, installable over the Plesk component manager, still not support argon2
-
Anonymous commented
PHP 7.4.7, 7.3.19 and 7.2.31, installable over the Plesk component manager, still not support argon2
-
Daniel K. commented
+1
-
Thomas Anders commented
I‘m using KeyHelp now. It’s free and can do nearly the same as plesk if you only host sites and mails.
I’m working only with TYPO3 and Argon2i is missing for years now. -
André commented
What do you expect?
It took one and a half year to fix a bug - making impossible to send mails to many recipients while DK_IM spam protection was enabloed. See https://talk.plesk.com/threads/315-duplicate-dkim-signatures-in-one-email-header.340713/
And this bug was ncot fixed in version 17.0., where it was reported, but in the next version 17.5.Now we talk about a new feature.
For me the solution is clear: This version of plesk was the last one I use for my current server. The next server won't have plesk any more. Not just me, but also some in our weg agency and on customer machines. We don#t pay for no-service! -
thom commented
Dear Plesk Team.
How much effort is required to compile all 7.x with argon2 enabled? Do you need days or weeks to do that?
Would appreciate to have it in. People that do are not aware will need days to find out. And if they do not cancel Plesk, they might start to dislike it.Thx.
-
Anonymous commented
I need it urgently for TYPO3 Installation!
-
Benjamin K. commented
I and my Typo3 would feel a lot saver with this!
-
Anonymous commented
I need it for TYPO3
-
Heinrich Krebs commented
Please yes, implement this.
-
Anonymous commented
I need it for TYPO3!
-
Reto commented
+1
We need this for Typo3. -
Black E34 commented
How long is it going to take to get this to become a reality???? I mean seriously this is a joke.
-
Anonymous commented
We need it for typo3
-
Anonymous commented
PLEASE
-
Julian commented
Argon2 is the recommended password hashing algorithm from Typo3 9.5 LTS. Please add it to PHP 7.2 and PHP 7.3.
-
Matt AIkens commented
@Hakan Fragapane that is not correct. You need to compile PHP with Argon2 support, regardless of whether it's 7.2 or 7.3. I should know - I found out the hard way when installing via Plesk, and it's why I commented initially, and voted.
Check the link below, and see under the PASSWORD_ARGON2I and PASSWORD_ARGON2ID.
You need to compile with the option:
--with-password-argon2
https://www.php.net/manual/en/function.password-hash.php -
Hakan Fragapane commented
You can hash right now with argon2 without any installation if your php version is more than 7.2.0. Argon2I is the next extension and for this you need PHP 7.3.0. My Website already hashes with this algorythm. Argon2 is already there.