From e75b8bc541d9a306ba17c627de56711b0f205da5 Mon Sep 17 00:00:00 2001
From: ReturnFI <151555003+ReturnFI@users.noreply.github.com>
Date: Fri, 12 Dec 2025 09:31:22 +0000
Subject: [PATCH] fix(normalsub): replace pwgen with openssl for subpath value
 generation

---
 core/scripts/normalsub/normalsub.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/core/scripts/normalsub/normalsub.sh b/core/scripts/normalsub/normalsub.sh
index 11a8e00..ae6b4bb 100644
--- a/core/scripts/normalsub/normalsub.sh
+++ b/core/scripts/normalsub/normalsub.sh
@@ -45,7 +45,7 @@ update_env_file() {
     local external_port=$2
     local aiohttp_listen_address=$3
     local aiohttp_listen_port=$4
-    local subpath_val=$(pwgen -s 32 1)
+    local subpath_val=$(openssl rand -base64 24 | tr -dc 'A-Za-z0-9' | head -c 32)
 
     cat <<EOL > "$NORMALSUB_ENV_FILE"
 HYSTERIA_DOMAIN=$domain