Current state of this gem about strongbox HOT 3 OPEN

Just my observation that upgrading to Ruby 2.4 breaks this gem with the following error:

OpenSSL::OpenSSLError:
       password must be at least 4 bytes

The line of code that breaks is lock.rb:49

        # Using a blank password in OpenSSL::PKey::RSA.new prevents reading
        # the private key if the file is a key pair
        public_key = get_rsa_key(@public_key,"")

The double quotes is a hard coded 'password', and that is the field that is expected to be 4 bytes or longer. There does not seem to be any way to configure this or force it to use a 4 byte (or longer) password, without monkey patching the gem.

Are you aware of any alternatives to this library, @ehannes , especially those which would allow us to continue using the current data in our database without a tedious decrypt/re-encrypt migration?

from strongbox.

I've noticed that the master branch is being updated, but there are no new releases since 2015. I am not sure about the status of the gem. Is it being mantained?

from strongbox.

I would say no since no maintainer has answered this question in 1,5 year :(

from strongbox.