mirror of
https://github.com/Icinga/icinga2.git
synced 2025-04-08 17:05:25 +02:00
Compare cluster tickets in constant time
Just to be sure.
This commit is contained in:
parent
b29b95e882
commit
b15763bd86
@ -197,7 +197,7 @@ Value RequestCertificateHandler(const MessageOrigin::Ptr& origin, const Dictiona
|
||||
<< "Certificate request for CN '" << cn << "': Comparing received ticket '"
|
||||
<< ticket << "' with calculated ticket '" << realTicket << "'.";
|
||||
|
||||
if (ticket != realTicket) {
|
||||
if (!Utility::ComparePasswords(ticket, realTicket)) {
|
||||
Log(LogWarning, "JsonRpcConnection")
|
||||
<< "Ticket '" << ticket << "' for CN '" << cn << "' is invalid.";
|
||||
|
||||
|
Loading…
x
Reference in New Issue
Block a user