Loading...
Loading...
The following new features are added to the Mirth® Connect Setup Wizard:
When upgrading Mirth® Connect, the Setup Wizard displays the existing values for the destination directory, license key, network ports, and password requirements from your mirth.properties file rather than the standard default values or the values that were entered previously.
The default digest/hash algorithm is changed from SHA256 to PBKDF2WithHmacSHA256. In addition, the default iteration count is changed from 1000 to 600000. Support for Argon2 is also added. This was done to conform with modern password security recommendations.
If you had already explicitly set digest.algorithm, then no changes are made, and Mirth® Connect will still use the digest algorithm that you have set.
If you had not already explicitly set digest.algorithm, then the new default algorithm will be used going forward. New "fallback" properties will be set to the old defaults so old digest values can still be verified. When a user updates their password, the digest value will be updated to use the new algorithm at that time.
To make sure you can still log onwith your existing credentials (which used the old digest settings), you want to make sure to set the "fallback" digest settings in mirth.properties. For example:
Then, update the digest.* settings to the new algorithm/etc you want to use.
After restarting Mirth® Connect, it will use the new digest settings for all new digest values. It will also use the "fallback" settings to verify old digest values.
To use the new digest value for your stored password hash in the database, update your user password in the Administrator.