Apache/httpcomponents-client
1
0
Fork 0
mirror of https://github.com/apache/httpcomponents-client.git synced 2025-02-09 03:25:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Use MessageDigest.isEquals method when comparing signatures in NTLMEngineImpl

Browse Source 
Signed-off-by: Andrea Cosentino <ancosen@gmail.com>
This commit is contained in:
Andrea Cosentino 2024-01-25 13:56:20 +01:00 committed by Oleg Kalnichevski
parent 4f8f34fe5c
commit 4adaa20be6
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/NTLMEngineImpl.java
View File

@ -926,7 +926,7 @@ private boolean validateSignature( final byte[] signature, final byte[] message
// log.info( "SSSSS validateSignature("+seqNumber+")\n"
// + " received: " + DebugUtil.dump( signature ) + "\n"
// + " computed: " + DebugUtil.dump( computedSignature ) );
return Arrays.equals( signature, computedSignature );
return MessageDigest.isEqual( signature, computedSignature );
}
public byte[] signAndEncryptMessage( final byte[] cleartextMessage ) throws NTLMEngineException