tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Compare cluster tickets in constant time 

Just to be sure.
This commit is contained in:
Alexander A. Klimov 2022-03-31 19:06:14 +02:00
parent b29b95e882
commit b15763bd86
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
lib/remote/jsonrpcconnection-pki.cpp
View File

@ -197,7 +197,7 @@ Value RequestCertificateHandler(const MessageOrigin::Ptr& origin, const Dictiona
<< "Certificate request for CN '" << cn << "': Comparing received ticket '"
<< ticket << "' with calculated ticket '" << realTicket << "'.";
if (ticket != realTicket) {
if (!Utility::ComparePasswords(ticket, realTicket)) {
Log(LogWarning, "JsonRpcConnection")
<< "Ticket '" << ticket << "' for CN '" << cn << "' is invalid.";