Topic "Doubt about master password..."

Author Message
Ricardo
[View user's profile]
Donor
Joined: 2006-02-03
Posts: 106
Hello Martin..

Nice changelog for 4.3.3...
(How can you keep doing that good job alone? (programming and forums))

Ok, my question is:
After upgrading I decided to change my master password.
Before doing so, WSCP used to ask for password always when it was started, but now it asks only when trying to connect to a server.
I see that it cleared the value of this variable in the config .ini file:

[Sessions\Default%20Settings]
ProxyPasswordEnc=

Why this difference?

I'd suggest master password prohibits the program to start if a wrong password is entered. It should not even display the servers I have saved in for those who don't know my password (the current behavior is to display servers, but not let connect).
Advertisements
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Ricardo wrote:
After upgrading I decided to change my master password.
Before doing so, WSCP used to ask for password always when it was started, but now it asks only when trying to connect to a server.

It asks for master password on the first moment it needs to decrypt the first password. So yes, for example when trying to connect to a server.

But if you had set the default proxy password that it indeed asked you for master password on the very start when loading the defaults to login dialog.

I do not know why it cleared the default proxy password. Can you try to reproduce the behaviour? (clear master password, downgrade, set it back, upgrade and set the master password, or whatever you did).

Quote:
I'd suggest master password prohibits the program to start if a wrong password is entered. It should not even display the servers I have saved in for those who don't know my password (the current behavior is to display servers, but not let connect).

So that means it would have to encrypt whole configuration, not just the passwords.
Ricardo
[View user's profile]
Donor
Joined: 2006-02-03
Posts: 106
When I read your answer, I thought "what is that proxy password?"
After doing tests, I found this:

This must be the password you're talking about:


Point is: my old 'WinSCP.ini' had a value defined for "ProxyPasswordEnc", but the value displayed is what you see in the above picture (nothing). Therefore, I imagine that after I changed my master password, WSCP regenerated all passwords and, while thinking proxy pass was empty, it then fixed the configuration file by clearing its ghost value.

Anyway, I don't remember when/why I set that password for proxy, so its value does not matter for me, but the inconsistence between UI and config file was the cause of my doubt, after all.

Off topic, I also found that WSCP sometimes may present some UI redraw problems like this:

It may happen if you change the pages on the lateral panel too fast, for example, by keeping up/down keyboard keys pressed for some time. I'm not sure if it'll always happen, or if it is related to my RAM being dirty in some way; I'll test again later.
Ricardo
[View user's profile]
Donor
Joined: 2006-02-03
Posts: 106
Ricardo wrote:
Off topic, I also found that WSCP sometimes may present some UI redraw problems like this:
It may happen if you change the pages on the lateral panel too fast, for example, by keeping up/down keyboard keys pressed for some time. I'm not sure if it'll always happen, or if it is related to my RAM being dirty in some way; I'll test again later.

Reproduced it again. Seems to always happen...
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
Ricardo wrote:
Reproduced it again. Seems to always happen...

I was able to reproduce it too. But luckily not with the upcoming major version (for which I use more modern IDE).
martin
[View user's profile]
Site Admin
Joined: 2002-12-10
Posts: 24530
Location: Prague, Czechia
prikryl wrote:
Ricardo wrote:
Reproduced it again. Seems to always happen...

I was able to reproduce it too. But luckily not with the upcoming major version (for which I use more modern IDE).

This bug has been added to tracker.
Advertisements

You can post new topics in this forum






Search Site

What is WinSCP?

It is award-winning SFTP client, SCP client, FTPS client and FTP client integrated into one software program for file transfer to FTP server or secure SFTP server. [More]

And it's free!

Donate

About donations

$9   $19   $49   $99

About donations

Recommend

WinSCP Privacy Policy

WinSCP License