What should I do about the following message in my CiviCRM status page, after upgrading to CiviCRM 5.3.0, PHP 7.2 from 5.6, and also upgrading my OS from Debian 8 to Debian 9:
PHP Missing Extension "mcrypt". Your PHP does not include the recommended encryption functions. Some passwords will not be stored encrypted, and if you have recently upgraded from a PHP that does include these functions, your encrypted passwords will not be decrypted correctly. If you are using PHP 7.0 or earlier, you probably want to include the "mcrypt" extension.
Rather than downgrade to PHP 7.0, how do I know if I need this extension, if I was using it before, and what I can do to make sure I'm taken care of with regard to encryption? If I am on PHP 7.2, can I just ignore this message? Can I use something else since it was deprecated in 7.1 and removed in 7.2?
Upon trying to install it with the PECL library, I get:
php-mcrypt : Depends: php7.2-mcrypt but it is not installable E: Unable to correct problems, you have held broken packages.
What is throwing me off is that part that says,
"If you are using PHP 7.0 or earlier"
And if I'm not on PHP 7.0 or earlier, what should I do, install it anyway? Thanks!