From 3bd104a46c94a3156ea0cf5758729e71076cb8fd Mon Sep 17 00:00:00 2001
From: Richard Alpe <richard@bit42.se>
Date: Tue, 31 Oct 2023 12:45:43 +0100
Subject: [PATCH] cli: use pwgen secure and increase password length

Adhere to our recommendations and avoid pseudorandom passwords which
are "easy to remember". Also increase password length to 13 chars.

Side notes:
Knowing that a password contains at least one char, one number and so
on, lowers the number of possible passwords to test when brute forcing.

The entropy for the pwgen "easy to remember" passwords isn't good
(naturally).

Signed-off-by: Richard Alpe <richard@bit42.se>
---
 src/klish-plugin-infix/xml/infix.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/klish-plugin-infix/xml/infix.xml b/src/klish-plugin-infix/xml/infix.xml
index 21f551bc..2bf9bb73 100644
--- a/src/klish-plugin-infix/xml/infix.xml
+++ b/src/klish-plugin-infix/xml/infix.xml
@@ -159,7 +159,7 @@
 
 <COMMAND name="password" help="Password tools" mode="switch">
   <COMMAND name="generate" help="Generate random passwords using pwgen">
-    <ACTION sym="script">pwgen -c -n -B -C</ACTION>
+    <ACTION sym="script">pwgen -C -s 13 20</ACTION>
   </COMMAND>
 
   <COMMAND name="encrypt" help="Encrypt a password string">