Manual:$wgSessionInsecureSecrets

Details
MediaWiki will not work out of the box if the PHP OpenSSL or mcrypt extensions are not available on the server. If for some reason you cannot install one of these extensions, you can set this configuration parameter to "true" to make MediaWiki work again. This comes at the cost of storing sensitive session data insecurely.