quantum/nginx-krbauth
1
0
Fork 0
mirror of https://github.com/quantum5/nginx-krbauth.git synced 2025-04-24 12:32:03 -04:00
Code Issues Packages Projects Releases Wiki Activity

Remove direct reference to SHA512 for HMAC verification

Browse source
This commit is contained in:
Quantum 2020-07-04 15:40:06 -04:00
parent 7d4e26b959
commit bc7c644664
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
nginx_krbauth.py
View file

@ -73,7 +73,7 @@ def verify_cookie(cookie, context):
return False return False
if not hmac.compare_digest(message[timestamp.size + RANDOM_SIZE:], context.bytes()): if not hmac.compare_digest(message[timestamp.size + RANDOM_SIZE:], context.bytes()):
return False return False
expected = hmac.new(HMAC_KEY, message, hashlib.sha512).digest() expected = hmac.new(HMAC_KEY, message, hmac_digest).digest()
return hmac.compare_digest(expected, signature) return hmac.compare_digest(expected, signature)