Caching_sha2_password

[gutiersa (Sandra Gutierrez)]

What would be required to get OpenEMR to use this validation method?
I apologize in advance if this has been addressed elsewhere.
I believe this method would strengthen OpenEMR even further.
I am interested in contributing to this password validation method.
I use windows and FreeBSD. If anyone can recommend a testing and development environment I would appreciate it.

Thanks

Sandra

[brady.miller]

hi @gutiersa ,

Check out this issue, which discusses this a bit:

MySQL 8 broken - Not able to login after installation

[RachelEllison]

Hi @gutiersa,

I believe @igorjovanovic was looking into this. Enabling SHA2 is a requirement for meaningful use 3 certification. So it is something OpenEMR will need to implement. See discussion here.

Message Digest & Encryption

Hi Igor, So reading the below link, which may not be the most up to date given the recent finalization: https://www.healthit.gov/test-method/integrity “Technical outcome – The health IT can create a message digest using a hashing algorithm with security strength equal or greater than SHA-2.” “Technical outcome – The health IT must be able to verify, in accordance with a hashing algorithm with security strength equal or greater than SHA-2, that information has not been altered or changed in a…

I use an ubuntu virtualbox virtual machine running on windows 10. You can find some instructions on how to configure a development environment on the openemr youtube channel.

OpenEMR

Thanks,
-Rachel