diff options
| author |  Sadie Powell | 2024-02-11 04:10:41 +0000 |
|---|---|---|
| committer | Sadie Powell | 2024-02-11 04:10:41 +0000 |
| commit | 9dba51c12a78ccce865f3a573b9d6435a576f13e (patch) | |
| tree | a76a04c9d77d7627fcaeda8e8394042f6038132a /src/modules | |
| parent | Bump peter-evans/create-pull-request from 5 to 6 (diff) | |
Use TimingSafeCompare when comparing server SSL fingerprints.
Diffstat (limited to 'src/modules')
| -rw-r--r-- | src/modules/m_spanningtree/hmac.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/modules/m_spanningtree/hmac.cpp b/src/modules/m_spanningtree/hmac.cpp index ce0b070cd..4556006a2 100644 --- a/src/modules/m_spanningtree/hmac.cpp +++ b/src/modules/m_spanningtree/hmac.cpp @@ -77,7 +77,7 @@ bool TreeSocket::ComparePass(const Link& link, const std::string &theirs) if (capab->auth_fingerprint) { /* Require fingerprint to exist and match */ - if (link.Fingerprint != fp) + if (!InspIRCd::TimingSafeCompare(link.Fingerprint, fp)) { ServerInstance->SNO->WriteToSnoMask('l',"Invalid SSL certificate fingerprint on link %s: need \"%s\" got \"%s\"", link.Name.c_str(), link.Fingerprint.c_str(), fp.c_str()); |